Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mlwr Infctn Win32:Sality-FUM [Drp] Win32:StubOfSality [Trj] / Trojan.MalPack.Gen


  • This topic is locked This topic is locked
14 replies to this topic

#1 David-68T

David-68T

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 22 March 2016 - 01:52 PM

Hello.

I hope you can help because I'm flying blind here. I've never come across this type of stubborn virus/malware/trojan.

First Symptoms: About one month ago I suddenly lost control of mouse, programs opened up randomly and super fast, complete hijack. Shut down my protection. Shutdown Windows Update. HitMan Pro unresponsive after 2 of scan%.  

Repeat Symptoms (I tried cleaning again and again but it keeps coming back) the speed of my SSD (C drive) has been reduced, Start up programs slow. I'm running Malwarebytes, CCleaner and Avast premium at startup/monitoring active.

Avast scan result in boot up mode: Win32:Sality-FUM [Drp] Win32:StubOfSality [Trj]
Malwarebytes in safe mode with networkingTrojan.MalPack.Gen (File D:\brke.pif), Trojan.MalPack.Gen (File E:\ jejguo.pif)
I have attached print screens of both

Sality Killer from Kaspersky: Nothing

^ This machine is relativley new Dell Inspiron 5000: I have swaped my boot up C drive for an ssd that I added with Windows 8.1. The D drive is the original HDD preloaded with Win 8. 


Thank you!!
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Windows 8.1 (administrator) on WINDOWS8 (22-03-2016 17:18:20)
Running from C:\Users\Windows 8.1\Downloads
Loaded Profiles: Windows 8.1 (Available Profiles: Windows 8.1)
Platform: Windows 8.1 Pro N (Update 1) (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Windows\KMS\KMS.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Zbshareware Lab) C:\Program Files (x86)\USB Disk Security\USBGuard.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
(Dell) C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe
() C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Dell) C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [395368 2015-11-16] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [323040 2015-11-18] (Intel Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161728 2015-11-12] (IvoSoft)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [7823824 2015-09-21] (Dell Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8495320 2015-06-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-04-28] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ACPW06EN] => C:\Program Files (x86)\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe [1133176 2012-08-31] (ACD Systems)
HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [658632 2012-07-31] (Zbshareware Lab)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [255208 2011-11-29] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-03-22] (AVAST Software)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\MountPoints2: {365f87f9-d326-11e5-9c07-780cb8a55ccf} - "F:\autorun.exe" 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-22] (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0B62A881-9682-4725-9430-73ADBE35865E}: [DhcpNameServer] 10.1.1.1
Tcpip\..\Interfaces\{1DB97557-2D0E-4A54-8B5A-CA6AAAA5FF8B}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BFF23D7E-59B8-4709-A935-EF561E74B667}: [DhcpNameServer] 10.1.1.1
 
Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-885293880-3586919169-2005417124-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-22] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-11-12] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-22] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
 
FireFox:
========
FF ProfilePath: C:\Users\Windows 8.1\AppData\Roaming\Mozilla\Firefox\Profiles\Zmf7m7vK.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-18] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-18] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-25] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-22] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-885293880-3586919169-2005417124-1001: SkypePlugin -> C:\Users\Windows 8.1\AppData\Local\SkypePlugin\7.14.0.184\npGatewayNpapi.dll [2016-02-05] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-885293880-3586919169-2005417124-1001: SkypePlugin64 -> C:\Users\Windows 8.1\AppData\Local\SkypePlugin\7.14.0.184\npGatewayNpapi-x64.dll [2016-02-05] (Skype Technologies S.A.)
FF Extension: Avira Browser Safety - C:\Users\Windows 8.1\AppData\Roaming\Mozilla\Firefox\Profiles\Zmf7m7vK.default\Extensions\abs@avira.com.xpi [2016-03-13]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
 
Chrome: 
=======
CHR Profile: C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Default
CHR Profile: C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Slides) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-22]
CHR Extension: (Google Docs) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-22]
CHR Extension: (Google Drive) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-22]
CHR Extension: (YouTube) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-22]
CHR Extension: (Google Sheets) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-22]
CHR Extension: (Google Docs Offline) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-22]
CHR Extension: (Avast Online Security) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-22]
CHR Extension: (Gmail) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-22]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]
CHR HKLM-x32\...\Chrome\Extension: [lkemddiljapcmhicklfpcbpfffahfbja] - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Default\extensions\WebNavigation.crx <not found>
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-22] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [119128 2016-03-22] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [5570120 2016-03-22] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [137968 2015-09-22] (Dell Inc.)
R2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [119656 2016-01-15] (Dell)
R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [36200 2016-01-11] ()
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [228216 2016-01-21] (Dell Inc.)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [19424 2015-11-18] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [353896 2015-11-16] (Intel Corporation)
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Corporation)
R3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [207648 2015-09-19] (Intel Corporation)
R2 KMS; C:\Windows\KMS\KMS.exe [32256 2014-01-04] () [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-05-22] (Realtek Semiconductor)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-12-13] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-22] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-22] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-22] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [552880 2016-03-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-22] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-22] (AVAST Software)
S3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-22] (Qualcomm Atheros Communications, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1424184 2014-06-17] (Motorola Solutions, Inc.)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [49584 2016-03-21] ()
R3 iaLPSS2_GPIO2; C:\Windows\system32\DRIVERS\iaLPSS2_GPIO2.sys [84264 2015-05-29] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\system32\DRIVERS\iaLPSS2_I2C.sys [185128 2015-05-29] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [220104 2014-08-05] (Intel Corporation)
R3 iusb3adp; C:\Windows\System32\drivers\iusb3adp.sys [37160 2015-06-03] (Intel)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [140672 2016-03-10] (Malwarebytes)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-22] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185088 2015-09-01] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3482600 2014-11-17] (Intel Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [154024 2016-03-22] (AVAST Software)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2013-02-01] (Realtek Semiconductor Corp.)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [310904 2016-03-22] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 WinDivert1.1; C:\Windows\KMS\WinDivert.sys [35376 2013-12-03] (Basil Projects)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-22 17:18 - 2016-03-22 17:18 - 00024032 _____ C:\Users\Windows 8.1\Downloads\FRST.txt
2016-03-22 17:17 - 2016-03-22 17:18 - 00000000 ____D C:\FRST
2016-03-22 17:16 - 2016-03-22 17:16 - 02374144 _____ (Farbar) C:\Users\Windows 8.1\Downloads\FRST64.exe
2016-03-22 16:37 - 2016-03-22 16:37 - 676771180 _____ C:\Windows\MEMORY.DMP
2016-03-22 16:37 - 2016-03-22 16:37 - 00292024 _____ C:\Windows\Minidump\032216-9046-01.dmp
2016-03-22 16:37 - 2016-03-22 16:37 - 00000000 ____D C:\Windows\Minidump
2016-03-22 15:59 - 2014-03-20 04:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-22 15:59 - 2014-03-20 03:48 - 21232792 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-03-22 15:59 - 2014-03-20 03:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-22 15:59 - 2014-03-20 03:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-03-22 15:59 - 2014-03-20 03:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-22 15:59 - 2014-03-20 01:29 - 04268544 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2016-03-22 15:59 - 2014-03-20 01:20 - 18679216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-03-22 15:59 - 2014-03-20 00:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-03-22 15:59 - 2014-03-20 00:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2016-03-22 15:59 - 2014-03-19 23:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-22 15:59 - 2014-03-19 23:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2016-03-22 15:59 - 2014-03-19 23:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2016-03-22 15:59 - 2014-03-19 07:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-22 15:59 - 2014-03-19 05:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2016-03-22 15:59 - 2014-03-19 05:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2016-03-22 15:59 - 2014-03-19 05:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-03-22 15:59 - 2014-03-19 05:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2016-03-22 15:59 - 2014-03-19 05:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-03-22 15:59 - 2014-03-19 04:41 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2016-03-22 15:59 - 2014-03-19 04:17 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2016-03-22 15:59 - 2014-03-15 04:56 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-22 15:59 - 2014-03-15 04:44 - 01705984 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-22 15:59 - 2014-03-13 12:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-03-22 15:59 - 2014-03-12 13:45 - 00387210 _____ C:\Windows\system32\ApnDatabase.xml
2016-03-22 15:59 - 2014-03-11 16:04 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2016-03-22 15:59 - 2014-03-11 15:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-03-22 15:59 - 2014-03-11 15:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-03-22 15:59 - 2014-03-11 15:02 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-03-22 15:59 - 2014-03-11 14:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2016-03-22 15:59 - 2014-03-11 14:25 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-03-22 15:59 - 2014-03-11 14:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-03-22 15:59 - 2014-03-11 14:03 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-03-22 15:59 - 2014-03-11 14:00 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-22 15:59 - 2014-03-11 13:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-03-22 15:59 - 2014-03-11 13:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-03-22 15:59 - 2014-03-11 12:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-22 15:59 - 2014-03-11 12:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-03-22 15:59 - 2014-03-08 20:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-03-22 15:59 - 2014-03-08 20:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-22 15:59 - 2014-03-08 20:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2016-03-22 15:59 - 2014-03-08 20:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-22 15:59 - 2014-03-08 20:35 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-03-22 15:59 - 2014-03-08 20:35 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-03-22 15:59 - 2014-03-08 15:29 - 01339240 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-03-22 15:59 - 2014-03-08 15:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2016-03-22 15:59 - 2014-03-08 11:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-22 15:59 - 2014-03-08 09:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-22 15:59 - 2014-03-08 09:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2016-03-22 15:59 - 2014-03-08 08:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-22 15:59 - 2014-03-08 08:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2016-03-22 15:59 - 2014-03-08 08:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2016-03-22 15:59 - 2014-03-08 08:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2016-03-22 15:59 - 2014-03-08 07:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-03-22 15:59 - 2014-03-08 07:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2016-03-22 15:59 - 2014-03-08 07:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2016-03-22 15:59 - 2014-03-08 07:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2016-03-22 15:59 - 2014-03-08 07:09 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-22 15:59 - 2014-03-08 07:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-03-22 15:59 - 2014-03-08 07:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-22 15:59 - 2014-03-08 07:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-03-22 15:59 - 2014-03-08 06:50 - 01066496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-03-22 15:59 - 2014-03-08 06:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-03-22 15:59 - 2014-03-08 06:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-03-22 15:59 - 2014-03-08 06:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-03-22 15:59 - 2014-03-08 06:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-03-22 15:59 - 2014-03-08 06:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-22 15:59 - 2014-03-08 06:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2016-03-22 15:59 - 2014-03-08 06:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-03-22 15:59 - 2014-03-08 06:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-03-22 15:59 - 2014-03-08 06:09 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-03-22 15:59 - 2014-03-08 06:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-03-22 15:59 - 2014-03-08 06:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-03-22 15:59 - 2014-03-08 05:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-03-22 15:59 - 2014-03-08 05:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-03-22 15:59 - 2014-03-08 05:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-03-22 15:59 - 2014-03-06 14:35 - 01466864 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-03-22 15:59 - 2014-03-06 14:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-22 15:59 - 2014-03-06 14:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2016-03-22 15:59 - 2014-03-06 12:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-03-22 15:59 - 2014-03-06 12:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-03-22 15:59 - 2014-03-06 12:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-03-22 15:59 - 2014-03-06 12:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-03-22 15:59 - 2014-03-06 12:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-03-22 15:59 - 2014-03-06 12:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-22 15:59 - 2014-03-06 12:40 - 00492256 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00467504 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00463264 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00244888 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-03-22 15:59 - 2014-03-06 12:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-03-22 15:59 - 2014-03-06 11:20 - 01200296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2016-03-22 15:59 - 2014-03-06 11:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2016-03-22 15:59 - 2014-03-06 11:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2016-03-22 15:59 - 2014-03-06 11:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-03-22 15:59 - 2014-03-06 11:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-03-22 15:59 - 2014-03-06 10:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00406512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00388408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-03-22 15:59 - 2014-03-06 09:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-03-22 15:59 - 2014-03-06 09:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-03-22 15:59 - 2014-03-06 09:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-03-22 15:59 - 2014-03-06 09:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-03-22 15:59 - 2014-03-06 09:22 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-03-22 15:59 - 2014-03-06 09:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-03-22 15:59 - 2014-03-06 09:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-03-22 15:59 - 2014-03-06 09:20 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-03-22 15:59 - 2014-03-06 09:20 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-22 15:59 - 2014-03-06 09:20 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-03-22 15:59 - 2014-03-06 09:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-22 15:59 - 2014-03-06 09:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-03-22 15:59 - 2014-03-06 09:19 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2016-03-22 15:59 - 2014-03-06 09:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-03-22 15:59 - 2014-03-06 09:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-03-22 15:59 - 2014-03-06 09:08 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2016-03-22 15:59 - 2014-03-06 09:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2016-03-22 15:59 - 2014-03-06 08:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2016-03-22 15:59 - 2014-03-06 08:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-03-22 15:59 - 2014-03-06 08:37 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-03-22 15:59 - 2014-03-06 08:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-03-22 15:59 - 2014-03-06 08:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-03-22 15:59 - 2014-03-06 08:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2016-03-22 15:59 - 2014-03-06 08:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-03-22 15:59 - 2014-03-06 08:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2016-03-22 15:59 - 2014-03-06 07:47 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-03-22 15:59 - 2014-03-06 07:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-03-22 15:59 - 2014-03-06 07:44 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-03-22 15:59 - 2014-03-06 07:22 - 16875520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-03-22 15:59 - 2014-03-06 07:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2016-03-22 15:59 - 2014-03-06 07:15 - 00667136 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-03-22 15:59 - 2014-03-06 07:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-03-22 15:59 - 2014-03-06 07:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-03-22 15:59 - 2014-03-06 06:59 - 12732416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-03-22 15:59 - 2014-03-06 06:57 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-03-22 15:59 - 2014-03-06 06:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-03-22 15:59 - 2014-03-06 06:42 - 00589824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-03-22 15:59 - 2014-03-06 06:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-22 15:59 - 2014-03-06 06:34 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-03-22 15:59 - 2014-03-06 06:33 - 13286400 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-03-22 15:59 - 2014-03-06 06:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-03-22 15:59 - 2014-03-06 06:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-03-22 15:59 - 2014-03-06 06:29 - 11791360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-03-22 15:59 - 2014-03-06 06:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-03-22 15:59 - 2014-03-06 06:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-03-22 15:59 - 2014-03-06 06:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2016-03-22 15:59 - 2014-03-06 06:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-03-22 15:59 - 2014-03-06 06:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2016-03-22 15:59 - 2014-03-06 06:21 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-03-22 15:59 - 2014-03-06 06:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-03-22 15:59 - 2014-03-06 06:16 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-03-22 15:59 - 2014-03-06 06:16 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-03-22 15:59 - 2014-03-06 06:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2016-03-22 15:59 - 2014-03-06 06:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-03-22 15:59 - 2014-03-06 06:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-03-22 15:59 - 2014-03-06 06:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-22 15:59 - 2014-03-06 06:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2016-03-22 15:59 - 2014-03-06 06:05 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-03-22 15:59 - 2014-03-06 06:04 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-03-22 15:59 - 2014-03-06 06:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2016-03-22 15:59 - 2014-03-06 06:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-03-22 15:59 - 2014-03-06 05:54 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-03-22 15:59 - 2014-03-06 05:54 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-03-22 15:59 - 2014-03-06 05:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-03-22 15:59 - 2014-03-06 05:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-03-22 15:59 - 2014-03-06 05:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-03-22 15:59 - 2014-03-06 05:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2016-03-22 15:59 - 2014-03-06 05:35 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-03-22 15:59 - 2014-03-06 05:33 - 00839168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-03-22 15:59 - 2014-03-06 05:32 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-03-22 15:59 - 2014-03-06 05:28 - 08653824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-03-22 15:59 - 2014-03-06 05:27 - 05833728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-03-22 15:59 - 2014-03-06 05:21 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-03-22 15:59 - 2014-03-06 05:20 - 06641152 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-03-22 15:59 - 2014-03-04 12:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-22 15:59 - 2014-03-04 12:15 - 02519384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-03-22 15:59 - 2014-03-04 12:15 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-03-22 15:59 - 2014-03-04 12:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-03-22 15:59 - 2014-03-04 11:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-22 15:59 - 2014-03-04 11:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2016-03-22 15:59 - 2014-03-04 08:11 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2016-03-22 15:59 - 2014-03-04 07:26 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AdmTmpl.dll
2016-03-22 15:59 - 2014-03-04 07:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-03-22 15:59 - 2014-03-04 07:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-03-22 15:59 - 2014-03-04 07:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-03-22 15:59 - 2014-03-04 07:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2016-03-22 15:59 - 2014-03-04 06:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-03-22 15:59 - 2014-03-04 06:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-03-22 15:59 - 2014-03-04 06:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-03-22 15:59 - 2014-03-04 06:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2016-03-22 15:59 - 2014-03-04 06:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2016-03-22 15:59 - 2014-03-04 06:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-03-22 15:59 - 2014-03-04 06:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2016-03-22 15:59 - 2014-03-04 06:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-03-22 15:59 - 2014-03-04 06:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2016-03-22 15:59 - 2014-03-04 05:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2016-03-22 15:59 - 2014-03-04 05:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-03-22 15:59 - 2014-02-06 22:59 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-03-22 15:59 - 2014-02-06 21:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-03-22 15:59 - 2013-12-23 23:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2016-03-22 15:59 - 2013-12-23 23:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2016-03-22 15:57 - 2014-03-02 10:20 - 23549952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-22 15:57 - 2014-03-02 09:33 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-22 15:57 - 2014-02-26 06:29 - 02678784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2016-03-22 15:56 - 2014-02-22 16:59 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-22 15:56 - 2014-02-22 16:59 - 00526304 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-03-22 15:56 - 2014-02-22 16:15 - 01929608 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-03-22 15:56 - 2014-02-22 16:00 - 00590168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-03-22 15:56 - 2014-02-22 15:55 - 01435304 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-03-22 15:56 - 2014-02-22 15:53 - 03394384 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-03-22 15:56 - 2014-02-22 15:50 - 02588168 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2016-03-22 15:56 - 2014-02-22 15:50 - 00645104 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-03-22 15:56 - 2014-02-22 15:48 - 02574240 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-03-22 15:56 - 2014-02-22 15:46 - 01927600 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-03-22 15:56 - 2014-02-22 15:46 - 01445616 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2016-03-22 15:56 - 2014-02-22 15:46 - 01000424 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-03-22 15:56 - 2014-02-22 15:44 - 00539992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-03-22 15:56 - 2014-02-22 15:43 - 01727760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 02142976 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 01215832 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 00800552 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 00609456 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-03-22 15:56 - 2014-02-22 15:40 - 01118552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-03-22 15:56 - 2014-02-22 14:52 - 01767440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2016-03-22 15:56 - 2014-02-22 14:42 - 01017936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-22 15:56 - 2014-02-22 14:42 - 00422968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-03-22 15:56 - 2014-02-22 14:38 - 01374384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-03-22 15:56 - 2014-02-22 14:38 - 01077944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2016-03-22 15:56 - 2014-02-22 14:25 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-03-22 15:56 - 2014-02-22 14:08 - 01474104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-22 15:56 - 2014-02-22 14:04 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-03-22 15:56 - 2014-02-22 14:04 - 01011280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-03-22 15:56 - 2014-02-22 14:04 - 00650736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-03-22 15:56 - 2014-02-22 12:24 - 02825216 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-03-22 15:56 - 2014-02-22 12:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2016-03-22 15:56 - 2014-02-22 12:15 - 04192768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-22 15:56 - 2014-02-22 12:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2016-03-22 15:56 - 2014-02-22 11:44 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-22 15:56 - 2014-02-22 11:28 - 02428928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-03-22 15:56 - 2014-02-22 11:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
2016-03-22 15:56 - 2014-02-22 11:00 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-22 15:56 - 2014-02-22 10:44 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-22 15:56 - 2014-02-22 10:38 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\DfpCommon.dll
2016-03-22 15:56 - 2014-02-22 10:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-22 15:56 - 2014-02-22 10:34 - 11742720 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-22 15:56 - 2014-02-22 10:06 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-03-22 15:56 - 2014-02-22 10:02 - 08946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-22 15:56 - 2014-02-22 10:01 - 02648064 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2016-03-22 15:56 - 2014-02-22 09:53 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-03-22 15:56 - 2014-02-22 09:52 - 01132032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-03-22 15:56 - 2014-02-22 09:47 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-03-22 15:56 - 2014-02-22 09:39 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-22 15:56 - 2014-02-22 09:38 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-03-22 15:56 - 2014-02-22 09:37 - 02220032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-03-22 15:56 - 2014-02-22 09:35 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll
2016-03-22 15:56 - 2014-02-22 09:33 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-22 15:56 - 2014-02-22 09:28 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-03-22 15:56 - 2014-02-22 09:26 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 03494912 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 00628224 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll
2016-03-22 15:56 - 2014-02-22 09:21 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-03-22 15:56 - 2014-02-22 09:16 - 11776000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-22 15:56 - 2014-02-22 09:14 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-03-22 15:56 - 2014-02-22 09:13 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2016-03-22 15:56 - 2014-02-22 09:11 - 02262016 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-22 15:56 - 2014-02-22 09:11 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-03-22 15:56 - 2014-02-22 09:10 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-03-22 15:56 - 2014-02-22 09:06 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-03-22 15:56 - 2014-02-22 09:04 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-03-22 15:56 - 2014-02-22 09:01 - 13933568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-22 15:56 - 2014-02-22 09:00 - 01341440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2016-03-22 15:56 - 2014-02-22 09:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-03-22 15:56 - 2014-02-22 08:59 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2016-03-22 15:56 - 2014-02-22 08:59 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2016-03-22 15:56 - 2014-02-22 08:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-03-22 15:56 - 2014-02-22 08:54 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-03-22 15:56 - 2014-02-22 08:53 - 12027904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-22 15:56 - 2014-02-22 08:49 - 08874496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-22 15:56 - 2014-02-22 08:49 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-22 15:56 - 2014-02-22 08:47 - 00517120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-03-22 15:56 - 2014-02-22 08:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-03-22 15:56 - 2014-02-22 08:42 - 03408384 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-22 15:56 - 2014-02-22 08:40 - 02368512 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-03-22 15:56 - 2014-02-22 08:39 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2016-03-22 15:56 - 2014-02-22 08:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-22 15:56 - 2014-02-22 08:37 - 01716736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-03-22 15:56 - 2014-02-22 08:34 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2016-03-22 15:56 - 2014-02-22 08:32 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-22 15:56 - 2014-02-22 08:27 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-22 15:56 - 2014-02-22 08:24 - 02760704 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2016-03-22 15:56 - 2014-02-22 08:22 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-03-22 15:56 - 2014-02-22 08:21 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-03-22 15:56 - 2014-02-22 08:06 - 01640960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-03-22 15:56 - 2014-02-22 08:03 - 01496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-03-22 15:56 - 2014-02-22 08:01 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-03-22 15:56 - 2014-02-22 08:00 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-03-22 15:56 - 2014-02-08 01:08 - 00139600 _____ C:\Windows\system32\systemsf.ebd
2016-03-22 15:56 - 2014-01-29 08:53 - 01653352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 01519520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00461176 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2016-03-22 15:55 - 2014-02-22 16:59 - 00407536 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00289752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00209160 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00139464 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2016-03-22 15:55 - 2014-02-22 16:59 - 00123448 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-03-22 15:55 - 2014-02-22 16:58 - 00036200 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-03-22 15:55 - 2014-02-22 16:15 - 01206000 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2016-03-22 15:55 - 2014-02-22 16:15 - 00531128 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-03-22 15:55 - 2014-02-22 16:15 - 00275312 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2016-03-22 15:55 - 2014-02-22 16:15 - 00188464 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-03-22 15:55 - 2014-02-22 16:15 - 00071888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2016-03-22 15:55 - 2014-02-22 16:02 - 00170952 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-03-22 15:55 - 2014-02-22 16:02 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-03-22 15:55 - 2014-02-22 16:02 - 00080048 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2016-03-22 15:55 - 2014-02-22 16:00 - 00249688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-03-22 15:55 - 2014-02-22 16:00 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-03-22 15:55 - 2014-02-22 16:00 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-03-22 15:55 - 2014-02-22 16:00 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2016-03-22 15:55 - 2014-02-22 15:59 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2016-03-22 15:55 - 2014-02-22 15:59 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-03-22 15:55 - 2014-02-22 15:55 - 00388408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-03-22 15:55 - 2014-02-22 15:55 - 00244848 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-03-22 15:55 - 2014-02-22 15:55 - 00162176 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-03-22 15:55 - 2014-02-22 15:55 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-03-22 15:55 - 2014-02-22 15:55 - 00131168 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-03-22 15:55 - 2014-02-22 15:55 - 00105864 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-03-22 15:55 - 2014-02-22 15:53 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00761792 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-03-22 15:55 - 2014-02-22 15:50 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-03-22 15:55 - 2014-02-22 15:50 - 00258784 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00054816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2016-03-22 15:55 - 2014-02-22 15:50 - 00043408 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00032544 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe
2016-03-22 15:55 - 2014-02-22 15:49 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-03-22 15:55 - 2014-02-22 15:49 - 00280920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00189784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2016-03-22 15:55 - 2014-02-22 15:49 - 00148824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-22 15:55 - 2014-02-22 15:49 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2016-03-22 15:55 - 2014-02-22 15:48 - 01791752 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-03-22 15:55 - 2014-02-22 15:48 - 00210736 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2016-03-22 15:55 - 2014-02-22 15:46 - 00669896 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-22 15:55 - 2014-02-22 15:44 - 00924504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2016-03-22 15:55 - 2014-02-22 15:44 - 00424280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-03-22 15:55 - 2014-02-22 15:44 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2016-03-22 15:55 - 2014-02-22 15:44 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-03-22 15:55 - 2014-02-22 15:43 - 01659056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-03-22 15:55 - 2014-02-22 15:43 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-03-22 15:55 - 2014-02-22 15:43 - 01487520 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-03-22 15:55 - 2014-02-22 15:43 - 01356360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-03-22 15:55 - 2014-02-22 15:43 - 00142576 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-22 15:55 - 2014-02-22 15:43 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00391008 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00372360 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00028416 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-03-22 15:55 - 2014-02-22 14:52 - 00251504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powrprof.dll
2016-03-22 15:55 - 2014-02-22 14:51 - 01063976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2016-03-22 15:55 - 2014-02-22 14:51 - 00140456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-03-22 15:55 - 2014-02-22 14:42 - 00410568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2016-03-22 15:55 - 2014-02-22 14:42 - 00369288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2016-03-22 15:55 - 2014-02-22 14:42 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2016-03-22 15:55 - 2014-02-22 14:42 - 00137344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2016-03-22 15:55 - 2014-02-22 14:42 - 00098072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-03-22 15:55 - 2014-02-22 14:41 - 00033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2016-03-22 15:55 - 2014-02-22 14:38 - 00506120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-03-22 15:55 - 2014-02-22 14:38 - 00336232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-03-22 15:55 - 2014-02-22 14:38 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-03-22 15:55 - 2014-02-22 14:25 - 00180240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2016-03-22 15:55 - 2014-02-22 14:18 - 00477744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-03-22 15:55 - 2014-02-22 14:18 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2016-03-22 15:55 - 2014-02-22 14:18 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2016-03-22 15:55 - 2014-02-22 14:18 - 00041320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe
2016-03-22 15:55 - 2014-02-22 14:18 - 00029912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe
2016-03-22 15:55 - 2014-02-22 14:11 - 00490136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-22 15:55 - 2014-02-22 14:08 - 00079496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 01206000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00518552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00317584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-03-22 15:55 - 2014-02-22 12:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-03-22 15:55 - 2014-02-22 12:20 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2016-03-22 15:55 - 2014-02-22 12:17 - 00890880 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-03-22 15:55 - 2014-02-22 12:17 - 00874496 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2016-03-22 15:55 - 2014-02-22 12:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00008192 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-session-winsta-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 12:14 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-03-22 15:55 - 2014-02-22 12:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2016-03-22 15:55 - 2014-02-22 12:14 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2016-03-22 15:55 - 2014-02-22 12:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2016-03-22 15:55 - 2014-02-22 12:11 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-03-22 15:55 - 2014-02-22 12:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-03-22 15:55 - 2014-02-22 12:08 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2016-03-22 15:55 - 2014-02-22 12:08 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2016-03-22 15:55 - 2014-02-22 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-03-22 15:55 - 2014-02-22 12:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-22 15:55 - 2014-02-22 12:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\WofUtil.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\clrhost.dll
2016-03-22 15:55 - 2014-02-22 12:06 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-03-22 15:55 - 2014-02-22 12:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-03-22 15:55 - 2014-02-22 12:03 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-03-22 15:55 - 2014-02-22 12:03 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2016-03-22 15:55 - 2014-02-22 12:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-03-22 15:55 - 2014-02-22 12:01 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\spcompat.dll
2016-03-22 15:55 - 2014-02-22 12:00 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-22 15:55 - 2014-02-22 12:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-03-22 15:55 - 2014-02-22 12:00 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll
2016-03-22 15:55 - 2014-02-22 11:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-03-22 15:55 - 2014-02-22 11:57 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2016-03-22 15:55 - 2014-02-22 11:54 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-03-22 15:55 - 2014-02-22 11:50 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-03-22 15:55 - 2014-02-22 11:50 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-03-22 15:55 - 2014-02-22 11:48 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2016-03-22 15:55 - 2014-02-22 11:47 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2016-03-22 15:55 - 2014-02-22 11:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2016-03-22 15:55 - 2014-02-22 11:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2016-03-22 15:55 - 2014-02-22 11:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-22 15:55 - 2014-02-22 11:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-03-22 15:55 - 2014-02-22 11:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2016-03-22 15:55 - 2014-02-22 11:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fhevents.dll
2016-03-22 15:55 - 2014-02-22 11:42 - 00038680 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2016-03-22 15:55 - 2014-02-22 11:41 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2016-03-22 15:55 - 2014-02-22 11:39 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\fhsvcctl.dll
2016-03-22 15:55 - 2014-02-22 11:37 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2016-03-22 15:55 - 2014-02-22 11:34 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2016-03-22 15:55 - 2014-02-22 11:32 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-03-22 15:55 - 2014-02-22 11:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-22 15:55 - 2014-02-22 11:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-03-22 15:55 - 2014-02-22 11:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2016-03-22 15:55 - 2014-02-22 11:25 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-03-22 15:55 - 2014-02-22 11:25 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2016-03-22 15:55 - 2014-02-22 11:25 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\f3ahvoas.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00008192 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2016-03-22 15:55 - 2014-02-22 11:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2016-03-22 15:55 - 2014-02-22 11:24 - 00780288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2016-03-22 15:55 - 2014-02-22 11:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SSShim.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 11:22 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-03-22 15:55 - 2014-02-22 11:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-03-22 15:55 - 2014-02-22 11:17 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-22 15:55 - 2014-02-22 11:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll
2016-03-22 15:55 - 2014-02-22 11:17 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2016-03-22 15:55 - 2014-02-22 11:16 - 00617472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-03-22 15:55 - 2014-02-22 11:16 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-22 15:55 - 2014-02-22 11:16 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-03-22 15:55 - 2014-02-22 11:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-03-22 15:55 - 2014-02-22 11:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-03-22 15:55 - 2014-02-22 11:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clrhost.dll
2016-03-22 15:55 - 2014-02-22 11:15 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2016-03-22 15:55 - 2014-02-22 11:14 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe
2016-03-22 15:55 - 2014-02-22 11:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2016-03-22 15:55 - 2014-02-22 11:11 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2016-03-22 15:55 - 2014-02-22 11:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-22 15:55 - 2014-02-22 11:09 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-03-22 15:55 - 2014-02-22 11:08 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-03-22 15:55 - 2014-02-22 11:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2016-03-22 15:55 - 2014-02-22 11:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-03-22 15:55 - 2014-02-22 11:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2016-03-22 15:55 - 2014-02-22 11:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2016-03-22 15:55 - 2014-02-22 11:06 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentHost.dll
2016-03-22 15:55 - 2014-02-22 11:04 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2016-03-22 15:55 - 2014-02-22 11:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-22 15:55 - 2014-02-22 11:02 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-03-22 15:55 - 2014-02-22 11:02 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2016-03-22 15:55 - 2014-02-22 11:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-03-22 15:55 - 2014-02-22 11:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-03-22 15:55 - 2014-02-22 11:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-22 15:55 - 2014-02-22 10:59 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-03-22 15:55 - 2014-02-22 10:59 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2016-03-22 15:55 - 2014-02-22 10:59 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
2016-03-22 15:55 - 2014-02-22 10:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-22 15:55 - 2014-02-22 10:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-03-22 15:55 - 2014-02-22 10:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-22 15:55 - 2014-02-22 10:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DAConn.dll
2016-03-22 15:55 - 2014-02-22 10:57 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2016-03-22 15:55 - 2014-02-22 10:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 02862592 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2016-03-22 15:55 - 2014-02-22 10:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2016-03-22 15:55 - 2014-02-22 10:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2016-03-22 15:55 - 2014-02-22 10:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-22 15:55 - 2014-02-22 10:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
2016-03-22 15:55 - 2014-02-22 10:52 - 02288640 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-03-22 15:55 - 2014-02-22 10:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-03-22 15:55 - 2014-02-22 10:51 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2016-03-22 15:55 - 2014-02-22 10:50 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-03-22 15:55 - 2014-02-22 10:50 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
2016-03-22 15:55 - 2014-02-22 10:47 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmdskmgr.dll
2016-03-22 15:55 - 2014-02-22 10:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-03-22 15:55 - 2014-02-22 10:47 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2016-03-22 15:55 - 2014-02-22 10:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-22 15:55 - 2014-02-22 10:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\dfp.exe
2016-03-22 15:55 - 2014-02-22 10:46 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2016-03-22 15:55 - 2014-02-22 10:41 - 02566656 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-03-22 15:55 - 2014-02-22 10:41 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-03-22 15:55 - 2014-02-22 10:41 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-03-22 15:55 - 2014-02-22 10:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2016-03-22 15:55 - 2014-02-22 10:40 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2016-03-22 15:55 - 2014-02-22 10:40 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2016-03-22 15:55 - 2014-02-22 10:39 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-03-22 15:55 - 2014-02-22 10:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-03-22 15:55 - 2014-02-22 10:37 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-03-22 15:55 - 2014-02-22 10:36 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-03-22 15:55 - 2014-02-22 10:36 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-22 15:55 - 2014-02-22 10:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-22 15:55 - 2014-02-22 10:35 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-03-22 15:55 - 2014-02-22 10:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2016-03-22 15:55 - 2014-02-22 10:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2016-03-22 15:55 - 2014-02-22 10:33 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-22 15:55 - 2014-02-22 10:33 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-03-22 15:55 - 2014-02-22 10:32 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-03-22 15:55 - 2014-02-22 10:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-22 15:55 - 2014-02-22 10:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe
2016-03-22 15:55 - 2014-02-22 10:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-22 15:55 - 2014-02-22 10:28 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-22 15:55 - 2014-02-22 10:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-03-22 15:55 - 2014-02-22 10:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-22 15:55 - 2014-02-22 10:25 - 01428480 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2016-03-22 15:55 - 2014-02-22 10:25 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2016-03-22 15:55 - 2014-02-22 10:22 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-03-22 15:55 - 2014-02-22 10:21 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2016-03-22 15:55 - 2014-02-22 10:21 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-22 15:55 - 2014-02-22 10:21 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
2016-03-22 15:55 - 2014-02-22 10:20 - 01152512 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-03-22 15:55 - 2014-02-22 10:18 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-03-22 15:55 - 2014-02-22 10:18 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-03-22 15:55 - 2014-02-22 10:17 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-03-22 15:55 - 2014-02-22 10:17 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-22 15:55 - 2014-02-22 10:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2016-03-22 15:55 - 2014-02-22 10:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2016-03-22 15:55 - 2014-02-22 10:16 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
2016-03-22 15:55 - 2014-02-22 10:16 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2016-03-22 15:55 - 2014-02-22 10:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-03-22 15:55 - 2014-02-22 10:14 - 02811392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2016-03-22 15:55 - 2014-02-22 10:14 - 02165760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
2016-03-22 15:55 - 2014-02-22 10:14 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-03-22 15:55 - 2014-02-22 10:13 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2016-03-22 15:55 - 2014-02-22 10:13 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-03-22 15:55 - 2014-02-22 10:13 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2016-03-22 15:55 - 2014-02-22 10:12 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\PurchaseWindowsLicense.dll
2016-03-22 15:55 - 2014-02-22 10:12 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-22 15:55 - 2014-02-22 10:08 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-03-22 15:55 - 2014-02-22 10:05 - 01757184 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-03-22 15:55 - 2014-02-22 10:04 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2016-03-22 15:55 - 2014-02-22 10:04 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll
2016-03-22 15:55 - 2014-02-22 10:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
2016-03-22 15:55 - 2014-02-22 10:03 - 02544128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2016-03-22 15:55 - 2014-02-22 10:03 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-03-22 15:55 - 2014-02-22 10:02 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-03-22 15:55 - 2014-02-22 10:01 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-03-22 15:55 - 2014-02-22 10:01 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2016-03-22 15:55 - 2014-02-22 10:01 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-03-22 15:55 - 2014-02-22 10:00 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-22 15:55 - 2014-02-22 10:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-03-22 15:55 - 2014-02-22 09:59 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-03-22 15:55 - 2014-02-22 09:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-03-22 15:55 - 2014-02-22 09:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-22 15:55 - 2014-02-22 09:57 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-03-22 15:55 - 2014-02-22 09:56 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-03-22 15:55 - 2014-02-22 09:55 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-03-22 15:55 - 2014-02-22 09:53 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-03-22 15:55 - 2014-02-22 09:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-22 15:55 - 2014-02-22 09:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-03-22 15:55 - 2014-02-22 09:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-03-22 15:55 - 2014-02-22 09:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2016-03-22 15:55 - 2014-02-22 09:49 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2016-03-22 15:55 - 2014-02-22 09:48 - 01136128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2016-03-22 15:55 - 2014-02-22 09:48 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-22 15:55 - 2014-02-22 09:48 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-03-22 15:55 - 2014-02-22 09:48 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-03-22 15:55 - 2014-02-22 09:46 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-03-22 15:55 - 2014-02-22 09:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\winsku.dll
2016-03-22 15:55 - 2014-02-22 09:45 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-22 15:55 - 2014-02-22 09:45 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-03-22 15:55 - 2014-02-22 09:45 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-03-22 15:55 - 2014-02-22 09:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-22 15:55 - 2014-02-22 09:45 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-03-22 15:55 - 2014-02-22 09:44 - 00675328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-03-22 15:55 - 2014-02-22 09:44 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-22 15:55 - 2014-02-22 09:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2016-03-22 15:55 - 2014-02-22 09:43 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2016-03-22 15:55 - 2014-02-22 09:43 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2016-03-22 15:55 - 2014-02-22 09:41 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2016-03-22 15:55 - 2014-02-22 09:40 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-03-22 15:55 - 2014-02-22 09:40 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-22 15:55 - 2014-02-22 09:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-03-22 15:55 - 2014-02-22 09:37 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2016-03-22 15:55 - 2014-02-22 09:36 - 01392640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-03-22 15:55 - 2014-02-22 09:36 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2016-03-22 15:55 - 2014-02-22 09:36 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WLanConn.dll
2016-03-22 15:55 - 2014-02-22 09:36 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2016-03-22 15:55 - 2014-02-22 09:35 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-03-22 15:55 - 2014-02-22 09:34 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-03-22 15:55 - 2014-02-22 09:34 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-03-22 15:55 - 2014-02-22 09:33 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-22 15:55 - 2014-02-22 09:33 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll
2016-03-22 15:55 - 2014-02-22 09:32 - 01162752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-03-22 15:55 - 2014-02-22 09:31 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-03-22 15:55 - 2014-02-22 09:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-03-22 15:55 - 2014-02-22 09:29 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-03-22 15:55 - 2014-02-22 09:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-03-22 15:55 - 2014-02-22 09:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2016-03-22 15:55 - 2014-02-22 09:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-03-22 15:55 - 2014-02-22 09:27 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2016-03-22 15:55 - 2014-02-22 09:27 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-03-22 15:55 - 2014-02-22 09:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-03-22 15:55 - 2014-02-22 09:26 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-03-22 15:55 - 2014-02-22 09:26 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2016-03-22 15:55 - 2014-02-22 09:25 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll
2016-03-22 15:55 - 2014-02-22 09:24 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-03-22 15:55 - 2014-02-22 09:23 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-22 15:55 - 2014-02-22 09:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-03-22 15:55 - 2014-02-22 09:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2016-03-22 15:55 - 2014-02-22 09:22 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-03-22 15:55 - 2014-02-22 09:22 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsku.dll
2016-03-22 15:55 - 2014-02-22 09:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\korwbrkr.dll
2016-03-22 15:55 - 2014-02-22 09:19 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-03-22 15:55 - 2014-02-22 09:19 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2016-03-22 15:55 - 2014-02-22 09:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2016-03-22 15:55 - 2014-02-22 09:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll
2016-03-22 15:55 - 2014-02-22 09:15 - 00211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2016-03-22 15:55 - 2014-02-22 09:14 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-03-22 15:55 - 2014-02-22 09:12 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll
2016-03-22 15:55 - 2014-02-22 09:11 - 02395136 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-22 15:55 - 2014-02-22 09:10 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2016-03-22 15:55 - 2014-02-22 09:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-22 15:55 - 2014-02-22 09:09 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2016-03-22 15:55 - 2014-02-22 09:08 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-03-22 15:55 - 2014-02-22 09:07 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2016-03-22 15:55 - 2014-02-22 09:07 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2016-03-22 15:55 - 2014-02-22 09:07 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2016-03-22 15:55 - 2014-02-22 09:06 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2016-03-22 15:55 - 2014-02-22 09:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-03-22 15:55 - 2014-02-22 09:04 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll
2016-03-22 15:55 - 2014-02-22 09:02 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2016-03-22 15:55 - 2014-02-22 09:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-03-22 15:55 - 2014-02-22 09:02 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-03-22 15:55 - 2014-02-22 08:59 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-03-22 15:55 - 2014-02-22 08:59 - 01403392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-22 15:55 - 2014-02-22 08:58 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2016-03-22 15:55 - 2014-02-22 08:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2016-03-22 15:55 - 2014-02-22 08:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-22 15:55 - 2014-02-22 08:55 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-03-22 15:55 - 2014-02-22 08:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AepRoam.dll
2016-03-22 15:55 - 2014-02-22 08:53 - 00876544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2016-03-22 15:55 - 2014-02-22 08:52 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2016-03-22 15:55 - 2014-02-22 08:52 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 01258496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-03-22 15:55 - 2014-02-22 08:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-22 15:55 - 2014-02-22 08:48 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll
2016-03-22 15:55 - 2014-02-22 08:46 - 03312128 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-03-22 15:55 - 2014-02-22 08:46 - 00824832 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-22 15:55 - 2014-02-22 08:45 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-03-22 15:55 - 2014-02-22 08:45 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-03-22 15:55 - 2014-02-22 08:45 - 00169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2016-03-22 15:55 - 2014-02-22 08:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-03-22 15:55 - 2014-02-22 08:44 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-03-22 15:55 - 2014-02-22 08:44 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2016-03-22 15:55 - 2014-02-22 08:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-03-22 15:55 - 2014-02-22 08:44 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-03-22 15:55 - 2014-02-22 08:43 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Renewal.dll
2016-03-22 15:55 - 2014-02-22 08:42 - 00943104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll
2016-03-22 15:55 - 2014-02-22 08:42 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2016-03-22 15:55 - 2014-02-22 08:42 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2016-03-22 15:55 - 2014-02-22 08:41 - 00662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-22 15:55 - 2014-02-22 08:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-03-22 15:55 - 2014-02-22 08:40 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-03-22 15:55 - 2014-02-22 08:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2016-03-22 15:55 - 2014-02-22 08:39 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2016-03-22 15:55 - 2014-02-22 08:39 - 00321536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
2016-03-22 15:55 - 2014-02-22 08:39 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2016-03-22 15:55 - 2014-02-22 08:38 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-03-22 15:55 - 2014-02-22 08:38 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2016-03-22 15:55 - 2014-02-22 08:37 - 00658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-03-22 15:55 - 2014-02-22 08:36 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2016-03-22 15:55 - 2014-02-22 08:35 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-22 15:55 - 2014-02-22 08:35 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll
2016-03-22 15:55 - 2014-02-22 08:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-03-22 15:55 - 2014-02-22 08:33 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-03-22 15:55 - 2014-02-22 08:33 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingMonitor.dll
2016-03-22 15:55 - 2014-02-22 08:31 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-03-22 15:55 - 2014-02-22 08:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-03-22 15:55 - 2014-02-22 08:30 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-03-22 15:55 - 2014-02-22 08:29 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2016-03-22 15:55 - 2014-02-22 08:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2016-03-22 15:55 - 2014-02-22 08:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2016-03-22 15:55 - 2014-02-22 08:22 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2016-03-22 15:55 - 2014-02-22 08:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2016-03-22 15:55 - 2014-02-22 08:21 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-03-22 15:55 - 2014-02-22 08:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2016-03-22 15:55 - 2014-02-22 08:20 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-03-22 15:55 - 2014-02-22 08:20 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2016-03-22 15:55 - 2014-02-22 08:19 - 00698880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-03-22 15:55 - 2014-02-22 08:19 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2016-03-22 15:55 - 2014-02-22 08:18 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-03-22 15:55 - 2014-02-22 08:17 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-03-22 15:55 - 2014-02-22 08:17 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2016-03-22 15:55 - 2014-02-22 08:17 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2016-03-22 15:55 - 2014-02-22 08:04 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-03-22 15:55 - 2014-02-22 08:01 - 00978944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2016-03-22 15:55 - 2014-02-22 07:54 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2016-03-22 15:55 - 2014-02-22 04:43 - 00002440 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-03-22 15:55 - 2014-02-22 04:33 - 00262335 _____ C:\Windows\system32\dfpinc.dat
2016-03-22 15:55 - 2014-02-08 01:08 - 00100197 _____ C:\Windows\SysWOW64\RacRules.xml
2016-03-22 15:55 - 2014-02-08 01:08 - 00100197 _____ C:\Windows\system32\RacRules.xml
2016-03-22 15:55 - 2014-02-02 14:48 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-03-22 15:55 - 2014-02-02 13:33 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-03-22 15:55 - 2014-02-01 06:00 - 00011109 _____ C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00011109 _____ C:\Windows\system32\connectedsearch-results.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007762 _____ C:\Windows\SysWOW64\connectedsearch-suggestions.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007762 _____ C:\Windows\system32\connectedsearch-suggestions.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007130 _____ C:\Windows\SysWOW64\connectedsearch-zeroinput.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007130 _____ C:\Windows\system32\connectedsearch-zeroinput.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00002255 _____ C:\Windows\SysWOW64\WimBootCompress.ini
2016-03-22 15:55 - 2014-02-01 06:00 - 00002255 _____ C:\Windows\system32\WimBootCompress.ini
2016-03-22 15:55 - 2014-01-31 12:09 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-03-22 15:55 - 2014-01-31 12:08 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-03-22 15:55 - 2014-01-31 11:59 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-03-22 15:55 - 2014-01-31 11:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-03-22 15:55 - 2014-01-31 09:55 - 03596800 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-03-22 15:55 - 2014-01-31 09:35 - 03085824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-03-22 15:55 - 2014-01-31 09:19 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-03-22 15:55 - 2014-01-31 09:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-03-22 15:55 - 2014-01-31 09:10 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-03-22 15:55 - 2014-01-31 09:08 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-03-22 15:55 - 2014-01-31 09:04 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-03-22 15:55 - 2014-01-31 08:24 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2016-03-22 15:55 - 2014-01-31 08:18 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2016-03-22 15:55 - 2014-01-29 08:52 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-03-22 15:55 - 2014-01-29 08:40 - 00994136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-03-22 15:55 - 2014-01-29 07:44 - 01369736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-03-22 15:55 - 2014-01-29 00:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-03-22 15:55 - 2014-01-29 00:18 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-03-22 15:55 - 2014-01-29 00:17 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-03-22 15:55 - 2014-01-27 19:53 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-22 15:55 - 2014-01-27 19:48 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-03-22 15:55 - 2014-01-27 17:54 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2016-03-22 15:55 - 2014-01-27 17:04 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-03-22 15:55 - 2014-01-27 15:38 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2016-03-22 15:55 - 2014-01-27 11:45 - 00050053 _____ C:\Windows\system32\srms.dat
2016-03-22 15:55 - 2014-01-22 06:21 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-03-22 15:55 - 2014-01-22 05:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2016-03-22 15:55 - 2014-01-17 17:24 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll
2016-03-22 15:55 - 2014-01-17 17:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll
2016-03-22 15:55 - 2014-01-08 01:30 - 00745328 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-22 15:55 - 2014-01-08 00:33 - 00552632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-22 15:55 - 2013-12-10 07:35 - 00530944 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-03-22 15:55 - 2013-12-04 18:41 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2016-03-22 15:55 - 2013-12-04 15:54 - 00660480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-03-22 15:55 - 2013-12-04 15:16 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-03-22 15:55 - 2013-12-04 14:19 - 00439808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-03-22 15:55 - 2013-12-04 13:53 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-03-22 15:55 - 2013-11-27 09:47 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2016-03-22 15:55 - 2013-11-27 09:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe
2016-03-22 15:55 - 2013-11-27 09:10 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2016-03-22 15:55 - 2013-11-27 08:56 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2016-03-22 15:55 - 2013-11-10 23:41 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-03-22 15:55 - 2013-11-08 04:04 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-03-22 15:55 - 2013-11-08 03:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-03-22 13:10 - 2016-03-22 13:10 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-22 13:10 - 2016-03-22 13:10 - 00002275 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-22 13:09 - 2016-03-22 17:14 - 00000926 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-22 13:09 - 2016-03-22 16:37 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-22 13:09 - 2016-03-22 13:09 - 00003898 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-22 13:09 - 2016-03-22 13:09 - 00003662 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-22 13:07 - 2016-03-22 13:07 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-22 13:06 - 2016-03-22 13:07 - 30510920 _____ C:\Users\Windows 8.1\Downloads\vlc-2.2.2-win32.exe
2016-03-22 12:42 - 2016-03-22 12:44 - 00000000 ____D C:\Windows\system32\MRT
2016-03-22 12:42 - 2016-03-22 12:42 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-22 12:36 - 2014-04-15 23:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-03-22 12:35 - 2014-04-15 23:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-03-22 12:31 - 2014-01-29 06:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2016-03-22 12:31 - 2014-01-29 00:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-03-22 12:31 - 2014-01-27 19:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-03-22 12:31 - 2014-01-27 18:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-03-22 12:31 - 2014-01-27 17:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-03-22 12:31 - 2014-01-27 17:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2016-03-22 12:31 - 2014-01-17 23:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-03-22 12:31 - 2014-01-17 21:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-03-22 12:31 - 2013-12-21 14:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-03-22 12:31 - 2013-12-21 08:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-03-22 12:29 - 2013-09-21 10:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-03-22 12:29 - 2013-09-21 10:53 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-03-22 12:29 - 2013-09-21 09:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-03-22 12:29 - 2013-08-31 14:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2016-03-22 12:29 - 2013-08-31 12:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2016-03-22 12:29 - 2013-08-27 06:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-03-22 12:29 - 2013-08-27 05:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2016-03-22 12:28 - 2014-10-30 22:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-03-22 12:28 - 2014-10-30 22:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-03-22 12:27 - 2013-11-27 15:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-03-22 12:27 - 2013-11-27 15:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-03-22 12:27 - 2013-11-27 14:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-03-22 12:27 - 2013-11-27 13:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-03-22 12:27 - 2013-11-15 14:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-22 12:27 - 2013-11-15 14:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-22 12:26 - 2014-01-04 15:54 - 00138240 _____ C:\Windows\system32\OEMLicense.dll
2016-03-22 12:26 - 2014-01-04 15:08 - 00103936 _____ C:\Windows\SysWOW64\OEMLicense.dll
2016-03-22 12:26 - 2014-01-02 23:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-03-22 12:26 - 2014-01-02 23:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-03-22 12:26 - 2013-12-31 23:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-03-22 12:26 - 2013-12-30 23:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2016-03-22 12:26 - 2013-12-30 23:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2016-03-22 12:26 - 2013-12-27 08:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-03-22 12:26 - 2013-12-27 07:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-03-22 12:26 - 2013-12-21 07:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2016-03-22 12:26 - 2013-12-17 07:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-03-22 12:24 - 2013-09-17 09:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-03-22 12:24 - 2013-09-17 06:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-03-22 12:21 - 2014-01-07 07:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2016-03-22 12:21 - 2014-01-07 05:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2016-03-22 12:21 - 2014-01-07 05:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-03-22 12:21 - 2014-01-07 04:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-03-22 12:21 - 2013-12-09 00:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-22 12:21 - 2013-12-09 00:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-03-22 12:21 - 2013-12-08 23:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-03-22 12:21 - 2013-12-08 23:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-22 12:21 - 2013-11-21 06:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-03-22 12:21 - 2013-11-21 05:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-03-22 01:33 - 2016-03-22 01:33 - 00552880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswnetsec.sys
2016-03-22 01:33 - 2016-03-22 01:33 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-03-22 01:33 - 2016-03-22 01:33 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-03-22 01:31 - 2016-03-22 16:21 - 05098592 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-22 00:48 - 2016-03-22 00:56 - 282531840 _____ C:\Users\Windows 8.1\Downloads\kav_rescue_10.iso
2016-03-22 00:47 - 2016-03-22 15:24 - 00304174 _____ C:\Windows\ntbtlog.txt
2016-03-22 00:47 - 2016-03-22 00:47 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-03-22 00:46 - 2016-03-22 00:46 - 00001785 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-03-22 00:46 - 2016-03-22 00:46 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\DAEMON Tools Lite
2016-03-22 00:46 - 2016-03-22 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-03-22 00:46 - 2016-03-22 00:46 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-03-22 00:46 - 2016-03-22 00:46 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-03-22 00:44 - 2016-03-22 00:44 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Windows 8.1\Downloads\DTLiteInstaller.exe
2016-03-22 00:14 - 2016-03-22 00:14 - 00295520 _____ (Kaspersky Lab ZAO) C:\Users\Windows 8.1\Downloads\salitykiller.exe
2016-03-21 22:50 - 2016-03-21 22:51 - 00246926 _____ C:\TDSSKiller.3.1.0.9_21.03.2016_22.50.29_log.txt
2016-03-21 22:42 - 2016-03-21 22:43 - 00246926 _____ C:\TDSSKiller.3.1.0.9_21.03.2016_22.42.36_log.txt
2016-03-21 22:42 - 2016-03-21 22:42 - 00000490 _____ C:\TDSSKiller.3.1.0.9_21.03.2016_22.42.16_log.txt
2016-03-21 21:16 - 2016-03-21 21:16 - 00021365 _____ C:\Users\Windows 8.1\Downloads\ip-locator.htm
2016-03-21 21:16 - 2016-03-21 21:16 - 00000467 _____ C:\Users\Windows 8.1\Downloads\url.htm
2016-03-20 20:33 - 2016-03-20 20:33 - 00001765 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-03-20 20:33 - 2016-03-20 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-03-20 20:32 - 2016-03-20 20:33 - 00000000 ____D C:\Program Files\iTunes
2016-03-20 20:32 - 2016-03-20 20:32 - 00000000 ____D C:\Program Files\iPod
2016-03-20 20:32 - 2016-03-20 20:32 - 00000000 ____D C:\Program Files (x86)\iTunes
2016-03-20 20:24 - 2016-03-20 20:29 - 167583000 _____ (Apple Inc.) C:\Users\Windows 8.1\Downloads\iTunes6464Setup.exe
2016-03-20 20:23 - 2016-03-20 20:23 - 00000000 ____D C:\Windows\system32\appmgmt
2016-03-20 18:47 - 2016-03-20 18:47 - 00000314 _____ C:\Users\Windows 8.1\Desktop\Safe Mode Instruct.txt
2016-03-20 18:10 - 2016-03-20 18:10 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-03-20 18:10 - 2016-03-20 18:10 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-03-20 18:10 - 2016-03-20 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-03-20 18:10 - 2016-03-20 18:10 - 00000000 ____D C:\Program Files\CCleaner
2016-03-20 18:09 - 2016-03-20 18:09 - 06837784 _____ (Piriform Ltd) C:\Users\Windows 8.1\Downloads\ccsetup515.exe
2016-03-20 16:52 - 2016-03-20 16:56 - 139602704 _____ (Microsoft Corporation) C:\Users\Windows 8.1\Downloads\msert.exe
2016-03-20 14:04 - 2016-03-20 14:05 - 00249140 _____ C:\TDSSKiller.3.1.0.9_20.03.2016_14.04.32_log.txt
2016-03-20 12:01 - 2016-03-21 23:46 - 00049584 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2016-03-20 12:00 - 2016-03-20 12:15 - 00000000 ____D C:\ProgramData\HitmanPro
2016-03-20 11:59 - 2016-03-20 12:00 - 11441744 _____ (SurfRight B.V.) C:\Users\Windows 8.1\Downloads\hitmanpro_x64.exe
2016-03-20 11:49 - 2016-03-22 16:37 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-20 11:49 - 2016-03-20 11:49 - 00001114 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-20 11:49 - 2016-03-20 11:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-20 11:49 - 2016-03-20 11:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-20 11:49 - 2016-03-20 11:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-20 11:49 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-20 11:49 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-20 11:49 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-20 11:45 - 2016-03-20 11:47 - 22851472 _____ (Malwarebytes ) C:\Users\Windows 8.1\Downloads\mbam-setup-2.2.1.1043.exe
2016-03-20 11:41 - 2016-03-20 11:41 - 00002200 _____ C:\Users\Windows 8.1\Downloads\Rkill.txt
2016-03-20 11:39 - 2016-03-20 11:41 - 00245704 _____ C:\TDSSKiller.3.1.0.9_20.03.2016_11.39.50_log.txt
2016-03-20 11:37 - 2016-03-21 22:51 - 00002552 _____ C:\Users\Windows 8.1\Desktop\Rkill.txt
2016-03-20 11:34 - 2016-03-20 11:36 - 00245990 _____ C:\TDSSKiller.3.1.0.9_20.03.2016_11.34.49_log.txt
2016-03-19 22:39 - 2016-03-20 11:44 - 00001753 _____ C:\Users\Windows 8.1\Desktop\config.txt
2016-03-19 13:05 - 2016-03-19 13:05 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2016-03-19 10:11 - 2016-03-22 11:48 - 00000000 ____D C:\Windows\SysWOW64\vbox
2016-03-19 10:11 - 2016-03-22 11:48 - 00000000 ____D C:\Windows\system32\vbox
2016-03-19 10:11 - 2016-03-22 01:35 - 00003048 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458382306
2016-03-19 10:11 - 2016-03-22 01:35 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-03-19 10:11 - 2016-03-22 01:33 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00154024 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-03-19 10:11 - 2016-03-20 14:21 - 00002091 _____ C:\Users\Public\Desktop\Avast Premier.lnk
2016-03-19 10:11 - 2016-03-19 10:11 - 00001053 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\AVAST Software
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-19 10:10 - 2016-03-19 10:11 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-19 10:10 - 2016-03-19 10:10 - 00466400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2016-03-19 10:09 - 2016-03-19 10:11 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-19 10:05 - 2016-03-19 10:05 - 00000000 ____D C:\Users\Windows 8.1\Downloads\Avast! Premier Antivirus [2016] 11.1.2245 Final
2016-03-18 23:45 - 2016-03-20 18:11 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Media Player Classic
2016-03-16 09:55 - 2016-03-21 15:33 - 00000000 ____D C:\Users\Windows 8.1\Desktop\gems
2016-03-16 09:55 - 2016-03-18 18:02 - 00021521 ____H C:\Users\Windows 8.1\Desktop\~WRL1165.tmp
2016-03-15 15:26 - 2015-07-27 18:50 - 00000383 _____ C:\Users\Windows 8.1\Downloads\README
2016-03-15 15:26 - 2012-03-01 22:18 - 00721408 _____ (hxxp://lame.sf.net) C:\Users\Windows 8.1\Downloads\lame_enc.dll
2016-03-15 15:25 - 2016-03-15 15:25 - 00319995 _____ C:\Users\Windows 8.1\Downloads\lame_v3.99.5.zip
2016-03-14 22:17 - 2016-03-17 10:28 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Audacity
2016-03-14 22:17 - 2016-03-14 22:17 - 00001031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-03-14 22:17 - 2016-03-14 22:17 - 00001019 _____ C:\Users\Public\Desktop\Audacity.lnk
2016-03-14 22:17 - 2016-03-14 22:17 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Audacity
2016-03-14 22:17 - 2016-03-14 22:17 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-03-14 22:12 - 2016-03-14 22:16 - 26496761 _____ (Audacity Team ) C:\Users\Windows 8.1\Downloads\audacity-win-2.1.2.exe
2016-03-13 22:37 - 2016-03-13 22:37 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Macromedia
2016-03-13 22:27 - 2016-03-13 22:27 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Avira
2016-03-13 09:32 - 2016-03-13 09:32 - 00000000 ____D C:\Users\Windows 8.1\Documents\Avatar
2016-03-08 23:01 - 2016-03-08 23:01 - 00296920 _____ C:\Users\Windows 8.1\Downloads\Reference Letter.zip
2016-02-24 18:19 - 2016-03-13 18:52 - 00000000 ____D C:\Users\Windows 8.1\Desktop\Tor Browser
2016-02-24 18:19 - 2016-02-24 18:19 - 00000773 _____ C:\Users\Windows 8.1\Desktop\Start Tor Browser.lnk
2016-02-24 18:17 - 2016-02-24 18:19 - 44088720 _____ C:\Users\Windows 8.1\Downloads\torbrowser-install-5.5.2_en-US (1).exe
2016-02-23 20:26 - 2016-02-24 18:19 - 00000821 _____ C:\Users\Windows 8.1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2016-02-23 20:23 - 2016-02-23 20:24 - 44088720 _____ C:\Users\Windows 8.1\Downloads\torbrowser-install-5.5.2_en-US.exe
2016-02-23 20:04 - 2016-02-23 20:17 - 00000000 ____D C:\Users\Windows 8.1\Desktop\vpn
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-22 17:01 - 2016-02-06 15:25 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\ClassicShell
2016-03-22 16:43 - 2014-03-24 13:12 - 00865408 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-22 16:43 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\Inf
2016-03-22 16:42 - 2014-03-24 13:21 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-885293880-3586919169-2005417124-1001
2016-03-22 16:37 - 2016-02-06 13:43 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-22 16:37 - 2016-02-06 13:43 - 00000000 __SHD C:\Users\Windows 8.1\IntelGraphicsProfiles
2016-03-22 16:37 - 2013-08-22 14:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-22 16:36 - 2014-03-24 15:31 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-22 16:29 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-22 16:28 - 2016-02-07 02:35 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\vlc
2016-03-22 16:20 - 2013-08-22 13:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ToastData
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\WinStore
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\setup
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\migwiz
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\lv-LV
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\lt-LT
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\et-EE
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\MediaViewer
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\FileManager
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Camera
2016-03-22 16:19 - 2013-08-22 15:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\Sysprep
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\oobe
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\Dism
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\servicing
2016-03-22 15:51 - 2013-08-22 15:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-22 15:24 - 2013-08-22 13:25 - 00000219 _____ C:\Windows\system.ini
2016-03-22 15:15 - 2016-02-10 00:56 - 00000000 ___HD C:\Windows\AxInstSV
2016-03-22 13:10 - 2016-02-06 15:45 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-22 13:10 - 2014-03-24 15:21 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Google
2016-03-22 13:09 - 2016-02-06 15:45 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Deployment
2016-03-22 13:07 - 2016-02-07 02:35 - 00001082 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-03-22 12:55 - 2014-03-24 15:21 - 00003950 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3834A3D6-D3B3-42CA-9916-E1EEE3DADAAD}
2016-03-22 12:35 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2016-03-21 23:49 - 2014-03-24 15:32 - 00000000 ____D C:\Program Files (x86)\FreeTime
2016-03-21 22:01 - 2016-02-07 02:51 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Azureus
2016-03-21 21:04 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\NDF
2016-03-21 15:34 - 2016-02-12 15:47 - 00001456 _____ C:\Users\Windows 8.1\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-03-20 20:32 - 2016-02-09 01:56 - 00000000 ____D C:\ProgramData\Apple
2016-03-20 20:32 - 2016-02-09 01:56 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-03-20 18:25 - 2014-03-24 13:10 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Packages
2016-03-20 18:23 - 2016-02-06 13:44 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2016-03-20 18:23 - 2014-03-24 15:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-20 18:22 - 2016-02-06 13:46 - 00000000 ____D C:\Users\Windows 8.1\Documents\CyberLink
2016-03-20 18:22 - 2014-03-24 15:26 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\CyberLink
2016-03-20 18:22 - 2014-03-24 15:26 - 00000000 ____D C:\ProgramData\CyberLink
2016-03-20 18:22 - 2014-03-24 15:23 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-03-20 18:17 - 2014-03-24 14:34 - 00000000 ____D C:\ProgramData\Nero
2016-03-20 18:17 - 2014-03-24 14:34 - 00000000 ____D C:\Program Files (x86)\Nero
2016-03-20 18:11 - 2014-03-24 14:01 - 00000000 ____D C:\Windows\Panther
2016-03-19 13:05 - 2014-03-24 13:10 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Adobe
2016-03-19 10:05 - 2016-02-07 02:51 - 00000000 ____D C:\Users\Windows 8.1\Documents\Vuze Downloads
2016-03-18 23:59 - 2016-02-06 13:47 - 00000000 ____D C:\ProgramData\Avira
2016-03-18 23:59 - 2016-02-06 13:47 - 00000000 ____D C:\Program Files (x86)\Avira
2016-03-18 23:59 - 2014-03-24 22:56 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-18 14:19 - 2014-03-24 15:31 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-18 14:19 - 2014-03-24 13:30 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Adobe
2016-03-17 22:52 - 2016-02-09 04:30 - 00000000 ____D C:\ProgramData\Soulseek
2016-03-17 10:47 - 2016-02-09 04:33 - 00000000 ____D C:\Users\Windows 8.1\Documents\soulseek
2016-03-17 02:57 - 2016-02-08 01:33 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\ElevatedDiagnostics
2016-03-15 17:41 - 2014-03-24 15:31 - 00000000 ____D C:\The KMPlayer
2016-03-13 09:32 - 2014-03-24 23:11 - 00000000 ____D C:\Users\Windows 8.1\Documents\Youcam
2016-03-13 09:32 - 2014-03-24 23:07 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\CyberLink
 
==================== Files in the root of some directories =======
 
2016-02-12 15:47 - 2016-03-21 15:34 - 0001456 _____ () C:\Users\Windows 8.1\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-02-07 16:33 - 2016-02-07 16:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-03-21 11:23
 
==================== End of FRST.txt ============================





 

Attached Files


Edited by hamluis, 22 March 2016 - 02:50 PM.
Moved back where it belongs, I moved by mistake - Hamluis.


BC AdBot (Login to Remove)

 


#2 xXToffeeXx

xXToffeeXx

    Bleepin' Polar Bear


  • Malware Response Instructor
  • 6,027 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Arctic Circle
  • Local time:11:25 AM

Posted 22 March 2016 - 02:57 PM

Hi David-68T,
 
This scan should tell me whether you have a sality infection, which I am most concerned about. 
 
This scan can take a long time, so it is best done overnight or when you do not need the computer
 
I'd like us to scan your machine with ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

xXToffeeXx~


~If I am helping you and you have not had a reply from me in two days, please send me a PM~

 

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic] - If we have helped you out and you want to support what we do, you can do so here

 

 ~Twitter~ | ~Malware Analyst at Emsisoft~


#3 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 22 March 2016 - 09:22 PM

1) Ran it. But no option to save any report. Maybe because it detected nothing? (see jpeg)
2) When downloading ESET "virus extensions update" computer went nuts again. The blue network bar on win 8 (see left of jpeg) spontaneously appeared and took control of cursor, which started flicking between available wifi connections. As if it knew what was being downloaded and wanted to obstruct it.
3) I had earlier uninstalled and reinstalled Chrome. Came back to find avast disabled in Chrome Browser. All remember password boxes ticked in settings, which I had deliberately unchecked.
4) Have uninstalled ESET. Will reinstall, run again, and do another log after as per original post in thread.    

Attached Files



#4 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 23 March 2016 - 06:05 AM

Hello. I loaded ESET again (fresh install) Same as last scan. No virus results. Here are the second Farbar rescan results.
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Windows 8.1 (administrator) on WINDOWS8 (23-03-2016 10:56:32)
Running from C:\Users\Windows 8.1\Downloads
Loaded Profiles: Windows 8.1 (Available Profiles: Windows 8.1)
Platform: Windows 8.1 Pro N (Update 1) (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Windows\KMS\KMS.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
(Dell) C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe
() C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Dell) C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Zbshareware Lab) C:\Program Files (x86)\USB Disk Security\USBGuard.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [395368 2015-11-16] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [323040 2015-11-18] (Intel Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161728 2015-11-12] (IvoSoft)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [7823824 2015-09-21] (Dell Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8495320 2015-06-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-04-28] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ACPW06EN] => C:\Program Files (x86)\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe [1133176 2012-08-31] (ACD Systems)
HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [658632 2012-07-31] (Zbshareware Lab)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [255208 2011-11-29] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-03-22] (AVAST Software)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-885293880-3586919169-2005417124-1001\...\MountPoints2: {365f87f9-d326-11e5-9c07-780cb8a55ccf} - "F:\autorun.exe" 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-22] (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0B62A881-9682-4725-9430-73ADBE35865E}: [DhcpNameServer] 10.1.1.1
Tcpip\..\Interfaces\{1DB97557-2D0E-4A54-8B5A-CA6AAAA5FF8B}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BFF23D7E-59B8-4709-A935-EF561E74B667}: [DhcpNameServer] 10.1.1.1
 
Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-885293880-3586919169-2005417124-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-22] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-11-12] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-22] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
 
FireFox:
========
FF ProfilePath: C:\Users\Windows 8.1\AppData\Roaming\Mozilla\Firefox\Profiles\Zmf7m7vK.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-18] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-18] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-25] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-25] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-22] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-885293880-3586919169-2005417124-1001: SkypePlugin -> C:\Users\Windows 8.1\AppData\Local\SkypePlugin\7.14.0.184\npGatewayNpapi.dll [2016-02-05] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-885293880-3586919169-2005417124-1001: SkypePlugin64 -> C:\Users\Windows 8.1\AppData\Local\SkypePlugin\7.14.0.184\npGatewayNpapi-x64.dll [2016-02-05] (Skype Technologies S.A.)
FF Extension: Avira Browser Safety - C:\Users\Windows 8.1\AppData\Roaming\Mozilla\Firefox\Profiles\Zmf7m7vK.default\Extensions\abs@avira.com.xpi [2016-03-13]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
 
Chrome: 
=======
CHR Profile: C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Default
CHR Profile: C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Slides) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-22]
CHR Extension: (Google Docs) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-22]
CHR Extension: (Google Drive) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-22]
CHR Extension: (YouTube) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-22]
CHR Extension: (Google Sheets) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-22]
CHR Extension: (Google Docs Offline) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-22]
CHR Extension: (Avast Online Security) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-22]
CHR Extension: (Gmail) - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-22]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]
CHR HKLM-x32\...\Chrome\Extension: [lkemddiljapcmhicklfpcbpfffahfbja] - C:\Users\Windows 8.1\AppData\Local\Google\Chrome\User Data\Default\extensions\WebNavigation.crx <not found>
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-22] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [119128 2016-03-22] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [5570120 2016-03-22] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [137968 2015-09-22] (Dell Inc.)
R2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [119656 2016-01-15] (Dell)
R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [36200 2016-01-11] ()
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [228216 2016-01-21] (Dell Inc.)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [19424 2015-11-18] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [353896 2015-11-16] (Intel Corporation)
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Corporation)
R3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [207648 2015-09-19] (Intel Corporation)
R2 KMS; C:\Windows\KMS\KMS.exe [32256 2014-01-04] () [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-05-22] (Realtek Semiconductor)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-12-13] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-22] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-22] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-22] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [552880 2016-03-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-22] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-22] (AVAST Software)
S3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-22] (Qualcomm Atheros Communications, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1424184 2014-06-17] (Motorola Solutions, Inc.)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [49584 2016-03-21] ()
R3 iaLPSS2_GPIO2; C:\Windows\system32\DRIVERS\iaLPSS2_GPIO2.sys [84264 2015-05-29] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\system32\DRIVERS\iaLPSS2_I2C.sys [185128 2015-05-29] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [220104 2014-08-05] (Intel Corporation)
R3 iusb3adp; C:\Windows\System32\drivers\iusb3adp.sys [37160 2015-06-03] (Intel)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [140672 2016-03-10] (Malwarebytes)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-23] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185088 2015-09-01] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3482600 2014-11-17] (Intel Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [154024 2016-03-22] (AVAST Software)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2013-02-01] (Realtek Semiconductor Corp.)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [310904 2016-03-22] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 WinDivert1.1; C:\Windows\KMS\WinDivert.sys [35376 2013-12-03] (Basil Projects)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-23 04:54 - 2016-03-23 04:54 - 1050767596 _____ C:\Windows\MEMORY.DMP
2016-03-23 04:54 - 2016-03-23 04:54 - 00292024 _____ C:\Windows\Minidump\032316-9234-01.dmp
2016-03-23 03:09 - 2016-03-23 03:09 - 02870984 _____ (ESET) C:\Users\Windows 8.1\Downloads\esetsmartinstaller_enu.exe
2016-03-23 03:09 - 2016-03-23 03:09 - 00000000 ____D C:\Program Files (x86)\ESET
2016-03-23 02:53 - 2016-03-23 10:20 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-23 02:53 - 2016-03-23 02:53 - 00001114 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-23 02:53 - 2016-03-23 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-23 02:53 - 2016-03-23 02:53 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-23 02:53 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-23 02:53 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-23 02:53 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-23 02:50 - 2016-03-23 02:52 - 22851472 _____ (Malwarebytes ) C:\Users\Windows 8.1\Downloads\mbam-setup-cnet.exe
2016-03-23 02:46 - 2016-03-23 03:10 - 00158196 _____ C:\Windows\ntbtlog.txt
2016-03-23 02:46 - 2016-03-23 02:46 - 05098592 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-22 18:38 - 2016-03-22 20:56 - 00035344 _____ C:\Users\Windows 8.1\Desktop\Addition.txt
2016-03-22 17:18 - 2016-03-23 10:56 - 00023065 _____ C:\Users\Windows 8.1\Downloads\FRST.txt
2016-03-22 17:18 - 2016-03-22 17:19 - 00035344 _____ C:\Users\Windows 8.1\Downloads\Addition.txt
2016-03-22 17:17 - 2016-03-23 10:56 - 00000000 ____D C:\FRST
2016-03-22 17:16 - 2016-03-22 17:16 - 02374144 _____ (Farbar) C:\Users\Windows 8.1\Downloads\FRST64.exe
2016-03-22 16:37 - 2016-03-23 04:54 - 00000000 ____D C:\Windows\Minidump
2016-03-22 15:59 - 2014-03-20 04:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-22 15:59 - 2014-03-20 03:48 - 21232792 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-03-22 15:59 - 2014-03-20 03:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-22 15:59 - 2014-03-20 03:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-03-22 15:59 - 2014-03-20 03:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-22 15:59 - 2014-03-20 01:29 - 04268544 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2016-03-22 15:59 - 2014-03-20 01:20 - 18679216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-03-22 15:59 - 2014-03-20 00:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-03-22 15:59 - 2014-03-20 00:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2016-03-22 15:59 - 2014-03-19 23:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-22 15:59 - 2014-03-19 23:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2016-03-22 15:59 - 2014-03-19 23:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2016-03-22 15:59 - 2014-03-19 07:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-22 15:59 - 2014-03-19 05:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2016-03-22 15:59 - 2014-03-19 05:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2016-03-22 15:59 - 2014-03-19 05:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-03-22 15:59 - 2014-03-19 05:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2016-03-22 15:59 - 2014-03-19 05:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-03-22 15:59 - 2014-03-19 04:41 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2016-03-22 15:59 - 2014-03-19 04:17 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2016-03-22 15:59 - 2014-03-15 04:56 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-22 15:59 - 2014-03-15 04:44 - 01705984 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-22 15:59 - 2014-03-13 12:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2016-03-22 15:59 - 2014-03-12 13:45 - 00387210 _____ C:\Windows\system32\ApnDatabase.xml
2016-03-22 15:59 - 2014-03-11 16:04 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2016-03-22 15:59 - 2014-03-11 15:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2016-03-22 15:59 - 2014-03-11 15:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2016-03-22 15:59 - 2014-03-11 15:02 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2016-03-22 15:59 - 2014-03-11 14:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2016-03-22 15:59 - 2014-03-11 14:25 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2016-03-22 15:59 - 2014-03-11 14:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-03-22 15:59 - 2014-03-11 14:03 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-03-22 15:59 - 2014-03-11 14:00 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-22 15:59 - 2014-03-11 13:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-03-22 15:59 - 2014-03-11 13:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-03-22 15:59 - 2014-03-11 12:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-22 15:59 - 2014-03-11 12:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-03-22 15:59 - 2014-03-08 20:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-03-22 15:59 - 2014-03-08 20:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-22 15:59 - 2014-03-08 20:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2016-03-22 15:59 - 2014-03-08 20:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-22 15:59 - 2014-03-08 20:35 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-03-22 15:59 - 2014-03-08 20:35 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-03-22 15:59 - 2014-03-08 15:29 - 01339240 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-03-22 15:59 - 2014-03-08 15:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2016-03-22 15:59 - 2014-03-08 11:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-22 15:59 - 2014-03-08 09:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-22 15:59 - 2014-03-08 09:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2016-03-22 15:59 - 2014-03-08 08:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-22 15:59 - 2014-03-08 08:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2016-03-22 15:59 - 2014-03-08 08:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2016-03-22 15:59 - 2014-03-08 08:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2016-03-22 15:59 - 2014-03-08 07:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-03-22 15:59 - 2014-03-08 07:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2016-03-22 15:59 - 2014-03-08 07:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2016-03-22 15:59 - 2014-03-08 07:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2016-03-22 15:59 - 2014-03-08 07:09 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-22 15:59 - 2014-03-08 07:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-03-22 15:59 - 2014-03-08 07:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-22 15:59 - 2014-03-08 07:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-03-22 15:59 - 2014-03-08 06:50 - 01066496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-03-22 15:59 - 2014-03-08 06:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-03-22 15:59 - 2014-03-08 06:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-03-22 15:59 - 2014-03-08 06:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-03-22 15:59 - 2014-03-08 06:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-03-22 15:59 - 2014-03-08 06:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-22 15:59 - 2014-03-08 06:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2016-03-22 15:59 - 2014-03-08 06:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-03-22 15:59 - 2014-03-08 06:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-03-22 15:59 - 2014-03-08 06:09 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-03-22 15:59 - 2014-03-08 06:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-03-22 15:59 - 2014-03-08 06:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-03-22 15:59 - 2014-03-08 05:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-03-22 15:59 - 2014-03-08 05:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-03-22 15:59 - 2014-03-08 05:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-03-22 15:59 - 2014-03-06 14:35 - 01466864 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2016-03-22 15:59 - 2014-03-06 14:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-22 15:59 - 2014-03-06 14:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2016-03-22 15:59 - 2014-03-06 12:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-03-22 15:59 - 2014-03-06 12:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-03-22 15:59 - 2014-03-06 12:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-03-22 15:59 - 2014-03-06 12:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-03-22 15:59 - 2014-03-06 12:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-03-22 15:59 - 2014-03-06 12:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-22 15:59 - 2014-03-06 12:40 - 00492256 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00467504 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00463264 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-03-22 15:59 - 2014-03-06 12:40 - 00244888 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-03-22 15:59 - 2014-03-06 12:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-03-22 15:59 - 2014-03-06 11:20 - 01200296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2016-03-22 15:59 - 2014-03-06 11:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2016-03-22 15:59 - 2014-03-06 11:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2016-03-22 15:59 - 2014-03-06 11:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-03-22 15:59 - 2014-03-06 11:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-03-22 15:59 - 2014-03-06 10:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00406512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00388408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-03-22 15:59 - 2014-03-06 10:35 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-03-22 15:59 - 2014-03-06 09:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2016-03-22 15:59 - 2014-03-06 09:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-03-22 15:59 - 2014-03-06 09:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-03-22 15:59 - 2014-03-06 09:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-03-22 15:59 - 2014-03-06 09:22 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-03-22 15:59 - 2014-03-06 09:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-03-22 15:59 - 2014-03-06 09:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-03-22 15:59 - 2014-03-06 09:20 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2016-03-22 15:59 - 2014-03-06 09:20 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-22 15:59 - 2014-03-06 09:20 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-03-22 15:59 - 2014-03-06 09:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-22 15:59 - 2014-03-06 09:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-03-22 15:59 - 2014-03-06 09:19 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2016-03-22 15:59 - 2014-03-06 09:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-03-22 15:59 - 2014-03-06 09:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-03-22 15:59 - 2014-03-06 09:08 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2016-03-22 15:59 - 2014-03-06 09:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2016-03-22 15:59 - 2014-03-06 08:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2016-03-22 15:59 - 2014-03-06 08:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-03-22 15:59 - 2014-03-06 08:37 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-03-22 15:59 - 2014-03-06 08:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2016-03-22 15:59 - 2014-03-06 08:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-03-22 15:59 - 2014-03-06 08:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2016-03-22 15:59 - 2014-03-06 08:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-03-22 15:59 - 2014-03-06 08:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2016-03-22 15:59 - 2014-03-06 07:47 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-03-22 15:59 - 2014-03-06 07:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-03-22 15:59 - 2014-03-06 07:44 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-03-22 15:59 - 2014-03-06 07:22 - 16875520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-03-22 15:59 - 2014-03-06 07:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2016-03-22 15:59 - 2014-03-06 07:15 - 00667136 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-03-22 15:59 - 2014-03-06 07:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-03-22 15:59 - 2014-03-06 07:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-03-22 15:59 - 2014-03-06 06:59 - 12732416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-03-22 15:59 - 2014-03-06 06:57 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2016-03-22 15:59 - 2014-03-06 06:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-03-22 15:59 - 2014-03-06 06:42 - 00589824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-03-22 15:59 - 2014-03-06 06:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-22 15:59 - 2014-03-06 06:34 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-03-22 15:59 - 2014-03-06 06:33 - 13286400 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-03-22 15:59 - 2014-03-06 06:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-03-22 15:59 - 2014-03-06 06:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-03-22 15:59 - 2014-03-06 06:29 - 11791360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-03-22 15:59 - 2014-03-06 06:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-03-22 15:59 - 2014-03-06 06:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-03-22 15:59 - 2014-03-06 06:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2016-03-22 15:59 - 2014-03-06 06:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-03-22 15:59 - 2014-03-06 06:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2016-03-22 15:59 - 2014-03-06 06:21 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2016-03-22 15:59 - 2014-03-06 06:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2016-03-22 15:59 - 2014-03-06 06:16 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2016-03-22 15:59 - 2014-03-06 06:16 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-03-22 15:59 - 2014-03-06 06:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2016-03-22 15:59 - 2014-03-06 06:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-03-22 15:59 - 2014-03-06 06:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-03-22 15:59 - 2014-03-06 06:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-22 15:59 - 2014-03-06 06:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2016-03-22 15:59 - 2014-03-06 06:05 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-03-22 15:59 - 2014-03-06 06:04 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-03-22 15:59 - 2014-03-06 06:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2016-03-22 15:59 - 2014-03-06 06:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-03-22 15:59 - 2014-03-06 05:54 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-03-22 15:59 - 2014-03-06 05:54 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-03-22 15:59 - 2014-03-06 05:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-03-22 15:59 - 2014-03-06 05:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-03-22 15:59 - 2014-03-06 05:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2016-03-22 15:59 - 2014-03-06 05:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2016-03-22 15:59 - 2014-03-06 05:35 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-03-22 15:59 - 2014-03-06 05:33 - 00839168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2016-03-22 15:59 - 2014-03-06 05:32 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-03-22 15:59 - 2014-03-06 05:28 - 08653824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-03-22 15:59 - 2014-03-06 05:27 - 05833728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-03-22 15:59 - 2014-03-06 05:21 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-03-22 15:59 - 2014-03-06 05:20 - 06641152 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-03-22 15:59 - 2014-03-04 12:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-22 15:59 - 2014-03-04 12:15 - 02519384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-03-22 15:59 - 2014-03-04 12:15 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-03-22 15:59 - 2014-03-04 12:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-03-22 15:59 - 2014-03-04 11:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-22 15:59 - 2014-03-04 11:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2016-03-22 15:59 - 2014-03-04 08:11 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2016-03-22 15:59 - 2014-03-04 07:26 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AdmTmpl.dll
2016-03-22 15:59 - 2014-03-04 07:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-03-22 15:59 - 2014-03-04 07:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-03-22 15:59 - 2014-03-04 07:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-03-22 15:59 - 2014-03-04 07:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2016-03-22 15:59 - 2014-03-04 06:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2016-03-22 15:59 - 2014-03-04 06:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-03-22 15:59 - 2014-03-04 06:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-03-22 15:59 - 2014-03-04 06:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2016-03-22 15:59 - 2014-03-04 06:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2016-03-22 15:59 - 2014-03-04 06:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2016-03-22 15:59 - 2014-03-04 06:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2016-03-22 15:59 - 2014-03-04 06:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2016-03-22 15:59 - 2014-03-04 06:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2016-03-22 15:59 - 2014-03-04 05:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2016-03-22 15:59 - 2014-03-04 05:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2016-03-22 15:59 - 2014-02-06 22:59 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-03-22 15:59 - 2014-02-06 21:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-03-22 15:59 - 2013-12-23 23:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2016-03-22 15:59 - 2013-12-23 23:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2016-03-22 15:57 - 2014-03-02 10:20 - 23549952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-22 15:57 - 2014-03-02 09:33 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-22 15:57 - 2014-02-26 06:29 - 02678784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2016-03-22 15:56 - 2014-02-22 16:59 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-22 15:56 - 2014-02-22 16:59 - 00526304 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-03-22 15:56 - 2014-02-22 16:15 - 01929608 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2016-03-22 15:56 - 2014-02-22 16:00 - 00590168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-03-22 15:56 - 2014-02-22 15:55 - 01435304 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-03-22 15:56 - 2014-02-22 15:53 - 03394384 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-03-22 15:56 - 2014-02-22 15:50 - 02588168 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2016-03-22 15:56 - 2014-02-22 15:50 - 00645104 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-03-22 15:56 - 2014-02-22 15:48 - 02574240 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-03-22 15:56 - 2014-02-22 15:46 - 01927600 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-03-22 15:56 - 2014-02-22 15:46 - 01445616 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2016-03-22 15:56 - 2014-02-22 15:46 - 01000424 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-03-22 15:56 - 2014-02-22 15:44 - 00539992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2016-03-22 15:56 - 2014-02-22 15:43 - 01727760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 02142976 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 01215832 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 00800552 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-03-22 15:56 - 2014-02-22 15:41 - 00609456 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-03-22 15:56 - 2014-02-22 15:40 - 01118552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-03-22 15:56 - 2014-02-22 14:52 - 01767440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2016-03-22 15:56 - 2014-02-22 14:42 - 01017936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-22 15:56 - 2014-02-22 14:42 - 00422968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-03-22 15:56 - 2014-02-22 14:38 - 01374384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-03-22 15:56 - 2014-02-22 14:38 - 01077944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2016-03-22 15:56 - 2014-02-22 14:25 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-03-22 15:56 - 2014-02-22 14:08 - 01474104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-22 15:56 - 2014-02-22 14:04 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-03-22 15:56 - 2014-02-22 14:04 - 01011280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-03-22 15:56 - 2014-02-22 14:04 - 00650736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-03-22 15:56 - 2014-02-22 12:24 - 02825216 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-03-22 15:56 - 2014-02-22 12:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2016-03-22 15:56 - 2014-02-22 12:15 - 04192768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-22 15:56 - 2014-02-22 12:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2016-03-22 15:56 - 2014-02-22 11:44 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-22 15:56 - 2014-02-22 11:28 - 02428928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-03-22 15:56 - 2014-02-22 11:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
2016-03-22 15:56 - 2014-02-22 11:00 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-22 15:56 - 2014-02-22 10:44 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-22 15:56 - 2014-02-22 10:38 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\DfpCommon.dll
2016-03-22 15:56 - 2014-02-22 10:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-22 15:56 - 2014-02-22 10:34 - 11742720 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-22 15:56 - 2014-02-22 10:06 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-03-22 15:56 - 2014-02-22 10:02 - 08946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-22 15:56 - 2014-02-22 10:01 - 02648064 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2016-03-22 15:56 - 2014-02-22 09:53 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-03-22 15:56 - 2014-02-22 09:52 - 01132032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-03-22 15:56 - 2014-02-22 09:47 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-03-22 15:56 - 2014-02-22 09:39 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-22 15:56 - 2014-02-22 09:38 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-03-22 15:56 - 2014-02-22 09:37 - 02220032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-03-22 15:56 - 2014-02-22 09:35 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll
2016-03-22 15:56 - 2014-02-22 09:33 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-22 15:56 - 2014-02-22 09:28 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-03-22 15:56 - 2014-02-22 09:26 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 03494912 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-03-22 15:56 - 2014-02-22 09:23 - 00628224 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll
2016-03-22 15:56 - 2014-02-22 09:21 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-03-22 15:56 - 2014-02-22 09:16 - 11776000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-22 15:56 - 2014-02-22 09:14 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-03-22 15:56 - 2014-02-22 09:13 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2016-03-22 15:56 - 2014-02-22 09:11 - 02262016 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-22 15:56 - 2014-02-22 09:11 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-03-22 15:56 - 2014-02-22 09:10 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-03-22 15:56 - 2014-02-22 09:06 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-03-22 15:56 - 2014-02-22 09:04 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-03-22 15:56 - 2014-02-22 09:01 - 13933568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-22 15:56 - 2014-02-22 09:00 - 01341440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2016-03-22 15:56 - 2014-02-22 09:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-03-22 15:56 - 2014-02-22 08:59 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2016-03-22 15:56 - 2014-02-22 08:59 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2016-03-22 15:56 - 2014-02-22 08:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-03-22 15:56 - 2014-02-22 08:54 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-03-22 15:56 - 2014-02-22 08:53 - 12027904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-22 15:56 - 2014-02-22 08:49 - 08874496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-22 15:56 - 2014-02-22 08:49 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-22 15:56 - 2014-02-22 08:47 - 00517120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-03-22 15:56 - 2014-02-22 08:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-03-22 15:56 - 2014-02-22 08:42 - 03408384 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-22 15:56 - 2014-02-22 08:40 - 02368512 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-03-22 15:56 - 2014-02-22 08:39 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2016-03-22 15:56 - 2014-02-22 08:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-22 15:56 - 2014-02-22 08:37 - 01716736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-03-22 15:56 - 2014-02-22 08:34 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2016-03-22 15:56 - 2014-02-22 08:32 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-22 15:56 - 2014-02-22 08:27 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-22 15:56 - 2014-02-22 08:24 - 02760704 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2016-03-22 15:56 - 2014-02-22 08:22 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-03-22 15:56 - 2014-02-22 08:21 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-03-22 15:56 - 2014-02-22 08:06 - 01640960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-03-22 15:56 - 2014-02-22 08:03 - 01496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-03-22 15:56 - 2014-02-22 08:01 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-03-22 15:56 - 2014-02-22 08:00 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-03-22 15:56 - 2014-02-08 01:08 - 00139600 _____ C:\Windows\system32\systemsf.ebd
2016-03-22 15:56 - 2014-01-29 08:53 - 01653352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 01519520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00461176 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2016-03-22 15:55 - 2014-02-22 16:59 - 00407536 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00289752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00209160 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2016-03-22 15:55 - 2014-02-22 16:59 - 00139464 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2016-03-22 15:55 - 2014-02-22 16:59 - 00123448 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-03-22 15:55 - 2014-02-22 16:58 - 00036200 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-03-22 15:55 - 2014-02-22 16:15 - 01206000 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2016-03-22 15:55 - 2014-02-22 16:15 - 00531128 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-03-22 15:55 - 2014-02-22 16:15 - 00275312 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2016-03-22 15:55 - 2014-02-22 16:15 - 00188464 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2016-03-22 15:55 - 2014-02-22 16:15 - 00071888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2016-03-22 15:55 - 2014-02-22 16:02 - 00170952 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-03-22 15:55 - 2014-02-22 16:02 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-03-22 15:55 - 2014-02-22 16:02 - 00080048 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2016-03-22 15:55 - 2014-02-22 16:00 - 00249688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2016-03-22 15:55 - 2014-02-22 16:00 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-03-22 15:55 - 2014-02-22 16:00 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-03-22 15:55 - 2014-02-22 16:00 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2016-03-22 15:55 - 2014-02-22 15:59 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2016-03-22 15:55 - 2014-02-22 15:59 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2016-03-22 15:55 - 2014-02-22 15:55 - 00388408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-03-22 15:55 - 2014-02-22 15:55 - 00244848 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-03-22 15:55 - 2014-02-22 15:55 - 00162176 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-03-22 15:55 - 2014-02-22 15:55 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-03-22 15:55 - 2014-02-22 15:55 - 00131168 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2016-03-22 15:55 - 2014-02-22 15:55 - 00105864 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-03-22 15:55 - 2014-02-22 15:53 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00761792 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-03-22 15:55 - 2014-02-22 15:50 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2016-03-22 15:55 - 2014-02-22 15:50 - 00258784 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00054816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2016-03-22 15:55 - 2014-02-22 15:50 - 00043408 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe
2016-03-22 15:55 - 2014-02-22 15:50 - 00032544 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe
2016-03-22 15:55 - 2014-02-22 15:49 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-03-22 15:55 - 2014-02-22 15:49 - 00280920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00189784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2016-03-22 15:55 - 2014-02-22 15:49 - 00148824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-22 15:55 - 2014-02-22 15:49 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2016-03-22 15:55 - 2014-02-22 15:49 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2016-03-22 15:55 - 2014-02-22 15:48 - 01791752 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-03-22 15:55 - 2014-02-22 15:48 - 00210736 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2016-03-22 15:55 - 2014-02-22 15:46 - 00669896 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-22 15:55 - 2014-02-22 15:44 - 00924504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2016-03-22 15:55 - 2014-02-22 15:44 - 00424280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2016-03-22 15:55 - 2014-02-22 15:44 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2016-03-22 15:55 - 2014-02-22 15:44 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-03-22 15:55 - 2014-02-22 15:43 - 01659056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-03-22 15:55 - 2014-02-22 15:43 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-03-22 15:55 - 2014-02-22 15:43 - 01487520 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-03-22 15:55 - 2014-02-22 15:43 - 01356360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-03-22 15:55 - 2014-02-22 15:43 - 00142576 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-22 15:55 - 2014-02-22 15:43 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00391008 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00372360 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-03-22 15:55 - 2014-02-22 15:41 - 00028416 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-03-22 15:55 - 2014-02-22 14:52 - 00251504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powrprof.dll
2016-03-22 15:55 - 2014-02-22 14:51 - 01063976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2016-03-22 15:55 - 2014-02-22 14:51 - 00140456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-03-22 15:55 - 2014-02-22 14:42 - 00410568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2016-03-22 15:55 - 2014-02-22 14:42 - 00369288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2016-03-22 15:55 - 2014-02-22 14:42 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2016-03-22 15:55 - 2014-02-22 14:42 - 00137344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2016-03-22 15:55 - 2014-02-22 14:42 - 00098072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-03-22 15:55 - 2014-02-22 14:41 - 00033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2016-03-22 15:55 - 2014-02-22 14:38 - 00506120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-03-22 15:55 - 2014-02-22 14:38 - 00336232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-03-22 15:55 - 2014-02-22 14:38 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-03-22 15:55 - 2014-02-22 14:25 - 00180240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2016-03-22 15:55 - 2014-02-22 14:18 - 00477744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-03-22 15:55 - 2014-02-22 14:18 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2016-03-22 15:55 - 2014-02-22 14:18 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2016-03-22 15:55 - 2014-02-22 14:18 - 00041320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe
2016-03-22 15:55 - 2014-02-22 14:18 - 00029912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe
2016-03-22 15:55 - 2014-02-22 14:11 - 00490136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-22 15:55 - 2014-02-22 14:08 - 00079496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 01206000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00518552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00317584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2016-03-22 15:55 - 2014-02-22 14:04 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-03-22 15:55 - 2014-02-22 12:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-03-22 15:55 - 2014-02-22 12:20 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2016-03-22 15:55 - 2014-02-22 12:17 - 00890880 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-03-22 15:55 - 2014-02-22 12:17 - 00874496 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2016-03-22 15:55 - 2014-02-22 12:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00008192 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-session-winsta-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 12:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 12:14 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-03-22 15:55 - 2014-02-22 12:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2016-03-22 15:55 - 2014-02-22 12:14 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2016-03-22 15:55 - 2014-02-22 12:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2016-03-22 15:55 - 2014-02-22 12:11 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-03-22 15:55 - 2014-02-22 12:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-03-22 15:55 - 2014-02-22 12:08 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2016-03-22 15:55 - 2014-02-22 12:08 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2016-03-22 15:55 - 2014-02-22 12:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-03-22 15:55 - 2014-02-22 12:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-22 15:55 - 2014-02-22 12:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\WofUtil.dll
2016-03-22 15:55 - 2014-02-22 12:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\clrhost.dll
2016-03-22 15:55 - 2014-02-22 12:06 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-03-22 15:55 - 2014-02-22 12:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2016-03-22 15:55 - 2014-02-22 12:03 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-03-22 15:55 - 2014-02-22 12:03 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2016-03-22 15:55 - 2014-02-22 12:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-03-22 15:55 - 2014-02-22 12:01 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\spcompat.dll
2016-03-22 15:55 - 2014-02-22 12:00 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-22 15:55 - 2014-02-22 12:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-03-22 15:55 - 2014-02-22 12:00 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll
2016-03-22 15:55 - 2014-02-22 11:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2016-03-22 15:55 - 2014-02-22 11:57 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2016-03-22 15:55 - 2014-02-22 11:54 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-03-22 15:55 - 2014-02-22 11:50 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-03-22 15:55 - 2014-02-22 11:50 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-03-22 15:55 - 2014-02-22 11:48 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2016-03-22 15:55 - 2014-02-22 11:47 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2016-03-22 15:55 - 2014-02-22 11:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2016-03-22 15:55 - 2014-02-22 11:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2016-03-22 15:55 - 2014-02-22 11:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-22 15:55 - 2014-02-22 11:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-03-22 15:55 - 2014-02-22 11:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2016-03-22 15:55 - 2014-02-22 11:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fhevents.dll
2016-03-22 15:55 - 2014-02-22 11:42 - 00038680 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2016-03-22 15:55 - 2014-02-22 11:41 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2016-03-22 15:55 - 2014-02-22 11:39 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\fhsvcctl.dll
2016-03-22 15:55 - 2014-02-22 11:37 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2016-03-22 15:55 - 2014-02-22 11:34 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2016-03-22 15:55 - 2014-02-22 11:32 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-03-22 15:55 - 2014-02-22 11:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-22 15:55 - 2014-02-22 11:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2016-03-22 15:55 - 2014-02-22 11:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2016-03-22 15:55 - 2014-02-22 11:25 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-03-22 15:55 - 2014-02-22 11:25 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2016-03-22 15:55 - 2014-02-22 11:25 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\f3ahvoas.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00008192 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 11:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2016-03-22 15:55 - 2014-02-22 11:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2016-03-22 15:55 - 2014-02-22 11:24 - 00780288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2016-03-22 15:55 - 2014-02-22 11:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SSShim.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2016-03-22 15:55 - 2014-02-22 11:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2016-03-22 15:55 - 2014-02-22 11:22 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2016-03-22 15:55 - 2014-02-22 11:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-03-22 15:55 - 2014-02-22 11:17 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-22 15:55 - 2014-02-22 11:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll
2016-03-22 15:55 - 2014-02-22 11:17 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2016-03-22 15:55 - 2014-02-22 11:16 - 00617472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-03-22 15:55 - 2014-02-22 11:16 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-22 15:55 - 2014-02-22 11:16 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-03-22 15:55 - 2014-02-22 11:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-03-22 15:55 - 2014-02-22 11:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-03-22 15:55 - 2014-02-22 11:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clrhost.dll
2016-03-22 15:55 - 2014-02-22 11:15 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2016-03-22 15:55 - 2014-02-22 11:14 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe
2016-03-22 15:55 - 2014-02-22 11:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2016-03-22 15:55 - 2014-02-22 11:11 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2016-03-22 15:55 - 2014-02-22 11:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-22 15:55 - 2014-02-22 11:09 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-03-22 15:55 - 2014-02-22 11:08 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-03-22 15:55 - 2014-02-22 11:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2016-03-22 15:55 - 2014-02-22 11:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-03-22 15:55 - 2014-02-22 11:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2016-03-22 15:55 - 2014-02-22 11:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2016-03-22 15:55 - 2014-02-22 11:06 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-03-22 15:55 - 2014-02-22 11:05 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentHost.dll
2016-03-22 15:55 - 2014-02-22 11:04 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2016-03-22 15:55 - 2014-02-22 11:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-22 15:55 - 2014-02-22 11:02 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2016-03-22 15:55 - 2014-02-22 11:02 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2016-03-22 15:55 - 2014-02-22 11:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-03-22 15:55 - 2014-02-22 11:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-03-22 15:55 - 2014-02-22 11:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-22 15:55 - 2014-02-22 10:59 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-03-22 15:55 - 2014-02-22 10:59 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2016-03-22 15:55 - 2014-02-22 10:59 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
2016-03-22 15:55 - 2014-02-22 10:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-22 15:55 - 2014-02-22 10:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-03-22 15:55 - 2014-02-22 10:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-22 15:55 - 2014-02-22 10:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DAConn.dll
2016-03-22 15:55 - 2014-02-22 10:57 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2016-03-22 15:55 - 2014-02-22 10:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 02862592 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2016-03-22 15:55 - 2014-02-22 10:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2016-03-22 15:55 - 2014-02-22 10:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2016-03-22 15:55 - 2014-02-22 10:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2016-03-22 15:55 - 2014-02-22 10:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-22 15:55 - 2014-02-22 10:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
2016-03-22 15:55 - 2014-02-22 10:52 - 02288640 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-03-22 15:55 - 2014-02-22 10:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2016-03-22 15:55 - 2014-02-22 10:51 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2016-03-22 15:55 - 2014-02-22 10:50 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-03-22 15:55 - 2014-02-22 10:50 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
2016-03-22 15:55 - 2014-02-22 10:47 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmdskmgr.dll
2016-03-22 15:55 - 2014-02-22 10:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2016-03-22 15:55 - 2014-02-22 10:47 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2016-03-22 15:55 - 2014-02-22 10:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-22 15:55 - 2014-02-22 10:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\dfp.exe
2016-03-22 15:55 - 2014-02-22 10:46 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2016-03-22 15:55 - 2014-02-22 10:41 - 02566656 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-03-22 15:55 - 2014-02-22 10:41 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-03-22 15:55 - 2014-02-22 10:41 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-03-22 15:55 - 2014-02-22 10:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2016-03-22 15:55 - 2014-02-22 10:40 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2016-03-22 15:55 - 2014-02-22 10:40 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2016-03-22 15:55 - 2014-02-22 10:39 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-03-22 15:55 - 2014-02-22 10:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2016-03-22 15:55 - 2014-02-22 10:37 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2016-03-22 15:55 - 2014-02-22 10:36 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-03-22 15:55 - 2014-02-22 10:36 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-22 15:55 - 2014-02-22 10:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-22 15:55 - 2014-02-22 10:35 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-03-22 15:55 - 2014-02-22 10:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2016-03-22 15:55 - 2014-02-22 10:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2016-03-22 15:55 - 2014-02-22 10:33 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-22 15:55 - 2014-02-22 10:33 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-03-22 15:55 - 2014-02-22 10:32 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-03-22 15:55 - 2014-02-22 10:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-22 15:55 - 2014-02-22 10:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe
2016-03-22 15:55 - 2014-02-22 10:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-22 15:55 - 2014-02-22 10:28 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-22 15:55 - 2014-02-22 10:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2016-03-22 15:55 - 2014-02-22 10:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-22 15:55 - 2014-02-22 10:25 - 01428480 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2016-03-22 15:55 - 2014-02-22 10:25 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2016-03-22 15:55 - 2014-02-22 10:22 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-03-22 15:55 - 2014-02-22 10:21 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2016-03-22 15:55 - 2014-02-22 10:21 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-22 15:55 - 2014-02-22 10:21 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
2016-03-22 15:55 - 2014-02-22 10:20 - 01152512 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2016-03-22 15:55 - 2014-02-22 10:18 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-03-22 15:55 - 2014-02-22 10:18 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-03-22 15:55 - 2014-02-22 10:17 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2016-03-22 15:55 - 2014-02-22 10:17 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-22 15:55 - 2014-02-22 10:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2016-03-22 15:55 - 2014-02-22 10:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2016-03-22 15:55 - 2014-02-22 10:16 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
2016-03-22 15:55 - 2014-02-22 10:16 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2016-03-22 15:55 - 2014-02-22 10:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2016-03-22 15:55 - 2014-02-22 10:14 - 02811392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2016-03-22 15:55 - 2014-02-22 10:14 - 02165760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
2016-03-22 15:55 - 2014-02-22 10:14 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2016-03-22 15:55 - 2014-02-22 10:13 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2016-03-22 15:55 - 2014-02-22 10:13 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2016-03-22 15:55 - 2014-02-22 10:13 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2016-03-22 15:55 - 2014-02-22 10:12 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\PurchaseWindowsLicense.dll
2016-03-22 15:55 - 2014-02-22 10:12 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2016-03-22 15:55 - 2014-02-22 10:09 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-22 15:55 - 2014-02-22 10:08 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-03-22 15:55 - 2014-02-22 10:05 - 01757184 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2016-03-22 15:55 - 2014-02-22 10:04 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2016-03-22 15:55 - 2014-02-22 10:04 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll
2016-03-22 15:55 - 2014-02-22 10:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
2016-03-22 15:55 - 2014-02-22 10:03 - 02544128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2016-03-22 15:55 - 2014-02-22 10:03 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-03-22 15:55 - 2014-02-22 10:02 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-03-22 15:55 - 2014-02-22 10:01 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-03-22 15:55 - 2014-02-22 10:01 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2016-03-22 15:55 - 2014-02-22 10:01 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-03-22 15:55 - 2014-02-22 10:00 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-22 15:55 - 2014-02-22 10:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-03-22 15:55 - 2014-02-22 09:59 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2016-03-22 15:55 - 2014-02-22 09:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-03-22 15:55 - 2014-02-22 09:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-22 15:55 - 2014-02-22 09:57 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-03-22 15:55 - 2014-02-22 09:56 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-03-22 15:55 - 2014-02-22 09:55 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-22 15:55 - 2014-02-22 09:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2016-03-22 15:55 - 2014-02-22 09:53 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-03-22 15:55 - 2014-02-22 09:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-22 15:55 - 2014-02-22 09:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-03-22 15:55 - 2014-02-22 09:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2016-03-22 15:55 - 2014-02-22 09:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2016-03-22 15:55 - 2014-02-22 09:49 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2016-03-22 15:55 - 2014-02-22 09:48 - 01136128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2016-03-22 15:55 - 2014-02-22 09:48 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-22 15:55 - 2014-02-22 09:48 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2016-03-22 15:55 - 2014-02-22 09:48 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-03-22 15:55 - 2014-02-22 09:46 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-03-22 15:55 - 2014-02-22 09:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\winsku.dll
2016-03-22 15:55 - 2014-02-22 09:45 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-22 15:55 - 2014-02-22 09:45 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2016-03-22 15:55 - 2014-02-22 09:45 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2016-03-22 15:55 - 2014-02-22 09:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-22 15:55 - 2014-02-22 09:45 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-03-22 15:55 - 2014-02-22 09:44 - 00675328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-03-22 15:55 - 2014-02-22 09:44 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-22 15:55 - 2014-02-22 09:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2016-03-22 15:55 - 2014-02-22 09:43 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2016-03-22 15:55 - 2014-02-22 09:43 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2016-03-22 15:55 - 2014-02-22 09:41 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2016-03-22 15:55 - 2014-02-22 09:40 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-03-22 15:55 - 2014-02-22 09:40 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-22 15:55 - 2014-02-22 09:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2016-03-22 15:55 - 2014-02-22 09:37 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2016-03-22 15:55 - 2014-02-22 09:36 - 01392640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2016-03-22 15:55 - 2014-02-22 09:36 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2016-03-22 15:55 - 2014-02-22 09:36 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WLanConn.dll
2016-03-22 15:55 - 2014-02-22 09:36 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2016-03-22 15:55 - 2014-02-22 09:35 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-03-22 15:55 - 2014-02-22 09:34 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-03-22 15:55 - 2014-02-22 09:34 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-03-22 15:55 - 2014-02-22 09:33 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-22 15:55 - 2014-02-22 09:33 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll
2016-03-22 15:55 - 2014-02-22 09:32 - 01162752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-03-22 15:55 - 2014-02-22 09:31 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2016-03-22 15:55 - 2014-02-22 09:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-03-22 15:55 - 2014-02-22 09:29 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2016-03-22 15:55 - 2014-02-22 09:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-03-22 15:55 - 2014-02-22 09:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2016-03-22 15:55 - 2014-02-22 09:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2016-03-22 15:55 - 2014-02-22 09:27 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2016-03-22 15:55 - 2014-02-22 09:27 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-03-22 15:55 - 2014-02-22 09:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-03-22 15:55 - 2014-02-22 09:26 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-03-22 15:55 - 2014-02-22 09:26 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2016-03-22 15:55 - 2014-02-22 09:25 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2016-03-22 15:55 - 2014-02-22 09:25 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll
2016-03-22 15:55 - 2014-02-22 09:24 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2016-03-22 15:55 - 2014-02-22 09:23 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-22 15:55 - 2014-02-22 09:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-03-22 15:55 - 2014-02-22 09:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2016-03-22 15:55 - 2014-02-22 09:22 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2016-03-22 15:55 - 2014-02-22 09:22 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsku.dll
2016-03-22 15:55 - 2014-02-22 09:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\korwbrkr.dll
2016-03-22 15:55 - 2014-02-22 09:19 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-03-22 15:55 - 2014-02-22 09:19 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2016-03-22 15:55 - 2014-02-22 09:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2016-03-22 15:55 - 2014-02-22 09:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll
2016-03-22 15:55 - 2014-02-22 09:15 - 00211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2016-03-22 15:55 - 2014-02-22 09:14 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-03-22 15:55 - 2014-02-22 09:12 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll
2016-03-22 15:55 - 2014-02-22 09:11 - 02395136 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-22 15:55 - 2014-02-22 09:10 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2016-03-22 15:55 - 2014-02-22 09:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-22 15:55 - 2014-02-22 09:09 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2016-03-22 15:55 - 2014-02-22 09:08 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-03-22 15:55 - 2014-02-22 09:07 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2016-03-22 15:55 - 2014-02-22 09:07 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2016-03-22 15:55 - 2014-02-22 09:07 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2016-03-22 15:55 - 2014-02-22 09:06 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2016-03-22 15:55 - 2014-02-22 09:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-03-22 15:55 - 2014-02-22 09:04 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll
2016-03-22 15:55 - 2014-02-22 09:02 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2016-03-22 15:55 - 2014-02-22 09:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2016-03-22 15:55 - 2014-02-22 09:02 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-03-22 15:55 - 2014-02-22 08:59 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-03-22 15:55 - 2014-02-22 08:59 - 01403392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-22 15:55 - 2014-02-22 08:58 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2016-03-22 15:55 - 2014-02-22 08:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2016-03-22 15:55 - 2014-02-22 08:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-22 15:55 - 2014-02-22 08:55 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll
2016-03-22 15:55 - 2014-02-22 08:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-03-22 15:55 - 2014-02-22 08:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2016-03-22 15:55 - 2014-02-22 08:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AepRoam.dll
2016-03-22 15:55 - 2014-02-22 08:53 - 00876544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2016-03-22 15:55 - 2014-02-22 08:52 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2016-03-22 15:55 - 2014-02-22 08:52 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 01258496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-03-22 15:55 - 2014-02-22 08:51 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2016-03-22 15:55 - 2014-02-22 08:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-22 15:55 - 2014-02-22 08:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-22 15:55 - 2014-02-22 08:48 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2016-03-22 15:55 - 2014-02-22 08:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2016-03-22 15:55 - 2014-02-22 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll
2016-03-22 15:55 - 2014-02-22 08:46 - 03312128 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2016-03-22 15:55 - 2014-02-22 08:46 - 00824832 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-22 15:55 - 2014-02-22 08:45 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-03-22 15:55 - 2014-02-22 08:45 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2016-03-22 15:55 - 2014-02-22 08:45 - 00169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2016-03-22 15:55 - 2014-02-22 08:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-03-22 15:55 - 2014-02-22 08:44 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-03-22 15:55 - 2014-02-22 08:44 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2016-03-22 15:55 - 2014-02-22 08:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-03-22 15:55 - 2014-02-22 08:44 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-03-22 15:55 - 2014-02-22 08:43 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-22 15:55 - 2014-02-22 08:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Renewal.dll
2016-03-22 15:55 - 2014-02-22 08:42 - 00943104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll
2016-03-22 15:55 - 2014-02-22 08:42 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2016-03-22 15:55 - 2014-02-22 08:42 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2016-03-22 15:55 - 2014-02-22 08:41 - 00662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-22 15:55 - 2014-02-22 08:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-03-22 15:55 - 2014-02-22 08:40 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-03-22 15:55 - 2014-02-22 08:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2016-03-22 15:55 - 2014-02-22 08:39 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2016-03-22 15:55 - 2014-02-22 08:39 - 00321536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
2016-03-22 15:55 - 2014-02-22 08:39 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2016-03-22 15:55 - 2014-02-22 08:38 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-03-22 15:55 - 2014-02-22 08:38 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2016-03-22 15:55 - 2014-02-22 08:37 - 00658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-03-22 15:55 - 2014-02-22 08:36 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2016-03-22 15:55 - 2014-02-22 08:35 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-22 15:55 - 2014-02-22 08:35 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll
2016-03-22 15:55 - 2014-02-22 08:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-03-22 15:55 - 2014-02-22 08:33 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2016-03-22 15:55 - 2014-02-22 08:33 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingMonitor.dll
2016-03-22 15:55 - 2014-02-22 08:31 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-03-22 15:55 - 2014-02-22 08:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-03-22 15:55 - 2014-02-22 08:30 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-03-22 15:55 - 2014-02-22 08:29 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2016-03-22 15:55 - 2014-02-22 08:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2016-03-22 15:55 - 2014-02-22 08:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2016-03-22 15:55 - 2014-02-22 08:22 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2016-03-22 15:55 - 2014-02-22 08:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2016-03-22 15:55 - 2014-02-22 08:21 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-03-22 15:55 - 2014-02-22 08:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2016-03-22 15:55 - 2014-02-22 08:20 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-03-22 15:55 - 2014-02-22 08:20 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2016-03-22 15:55 - 2014-02-22 08:19 - 00698880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-03-22 15:55 - 2014-02-22 08:19 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2016-03-22 15:55 - 2014-02-22 08:18 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-03-22 15:55 - 2014-02-22 08:17 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-03-22 15:55 - 2014-02-22 08:17 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2016-03-22 15:55 - 2014-02-22 08:17 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2016-03-22 15:55 - 2014-02-22 08:04 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2016-03-22 15:55 - 2014-02-22 08:01 - 00978944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2016-03-22 15:55 - 2014-02-22 07:54 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2016-03-22 15:55 - 2014-02-22 04:43 - 00002440 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-03-22 15:55 - 2014-02-22 04:37 - 00000369 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-03-22 15:55 - 2014-02-22 04:33 - 00262335 _____ C:\Windows\system32\dfpinc.dat
2016-03-22 15:55 - 2014-02-08 01:08 - 00100197 _____ C:\Windows\SysWOW64\RacRules.xml
2016-03-22 15:55 - 2014-02-08 01:08 - 00100197 _____ C:\Windows\system32\RacRules.xml
2016-03-22 15:55 - 2014-02-02 14:48 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-03-22 15:55 - 2014-02-02 13:33 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-03-22 15:55 - 2014-02-01 06:00 - 00011109 _____ C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00011109 _____ C:\Windows\system32\connectedsearch-results.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007762 _____ C:\Windows\SysWOW64\connectedsearch-suggestions.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007762 _____ C:\Windows\system32\connectedsearch-suggestions.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007130 _____ C:\Windows\SysWOW64\connectedsearch-zeroinput.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00007130 _____ C:\Windows\system32\connectedsearch-zeroinput.searchconnector-ms
2016-03-22 15:55 - 2014-02-01 06:00 - 00002255 _____ C:\Windows\SysWOW64\WimBootCompress.ini
2016-03-22 15:55 - 2014-02-01 06:00 - 00002255 _____ C:\Windows\system32\WimBootCompress.ini
2016-03-22 15:55 - 2014-01-31 12:09 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-03-22 15:55 - 2014-01-31 12:08 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-03-22 15:55 - 2014-01-31 11:59 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-03-22 15:55 - 2014-01-31 11:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-03-22 15:55 - 2014-01-31 09:55 - 03596800 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-03-22 15:55 - 2014-01-31 09:35 - 03085824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-03-22 15:55 - 2014-01-31 09:19 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-03-22 15:55 - 2014-01-31 09:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-03-22 15:55 - 2014-01-31 09:10 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-03-22 15:55 - 2014-01-31 09:08 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-03-22 15:55 - 2014-01-31 09:04 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-03-22 15:55 - 2014-01-31 08:24 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2016-03-22 15:55 - 2014-01-31 08:18 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2016-03-22 15:55 - 2014-01-29 08:52 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-03-22 15:55 - 2014-01-29 08:40 - 00994136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-03-22 15:55 - 2014-01-29 07:44 - 01369736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-03-22 15:55 - 2014-01-29 00:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2016-03-22 15:55 - 2014-01-29 00:18 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-03-22 15:55 - 2014-01-29 00:17 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2016-03-22 15:55 - 2014-01-27 19:53 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-22 15:55 - 2014-01-27 19:48 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-03-22 15:55 - 2014-01-27 17:54 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2016-03-22 15:55 - 2014-01-27 17:04 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-03-22 15:55 - 2014-01-27 15:38 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2016-03-22 15:55 - 2014-01-27 11:45 - 00050053 _____ C:\Windows\system32\srms.dat
2016-03-22 15:55 - 2014-01-22 06:21 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-03-22 15:55 - 2014-01-22 05:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2016-03-22 15:55 - 2014-01-17 17:24 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll
2016-03-22 15:55 - 2014-01-17 17:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll
2016-03-22 15:55 - 2014-01-08 01:30 - 00745328 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-22 15:55 - 2014-01-08 00:33 - 00552632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-22 15:55 - 2013-12-10 07:35 - 00530944 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2016-03-22 15:55 - 2013-12-04 18:41 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2016-03-22 15:55 - 2013-12-04 15:54 - 00660480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2016-03-22 15:55 - 2013-12-04 15:16 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-03-22 15:55 - 2013-12-04 14:19 - 00439808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2016-03-22 15:55 - 2013-12-04 13:53 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-03-22 15:55 - 2013-11-27 09:47 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2016-03-22 15:55 - 2013-11-27 09:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe
2016-03-22 15:55 - 2013-11-27 09:10 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2016-03-22 15:55 - 2013-11-27 08:56 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2016-03-22 15:55 - 2013-11-10 23:41 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-03-22 15:55 - 2013-11-08 04:04 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-03-22 15:55 - 2013-11-08 03:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-03-22 13:10 - 2016-03-22 13:10 - 00002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-22 13:10 - 2016-03-22 13:10 - 00002275 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-22 13:09 - 2016-03-23 10:20 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-22 13:09 - 2016-03-23 10:15 - 00000926 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-22 13:09 - 2016-03-22 13:09 - 00003898 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-22 13:09 - 2016-03-22 13:09 - 00003662 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-22 13:07 - 2016-03-22 13:07 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-22 13:06 - 2016-03-22 13:07 - 30510920 _____ C:\Users\Windows 8.1\Downloads\vlc-2.2.2-win32.exe
2016-03-22 12:42 - 2016-03-22 12:44 - 00000000 ____D C:\Windows\system32\MRT
2016-03-22 12:42 - 2016-03-22 12:42 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-22 12:36 - 2014-04-15 23:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-03-22 12:35 - 2014-04-15 23:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-03-22 12:31 - 2014-01-29 06:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2016-03-22 12:31 - 2014-01-29 00:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2016-03-22 12:31 - 2014-01-27 19:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-03-22 12:31 - 2014-01-27 18:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-03-22 12:31 - 2014-01-27 17:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-03-22 12:31 - 2014-01-27 17:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2016-03-22 12:31 - 2014-01-17 23:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-03-22 12:31 - 2014-01-17 21:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-03-22 12:31 - 2013-12-21 14:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-03-22 12:31 - 2013-12-21 08:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2016-03-22 12:29 - 2013-09-21 10:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2016-03-22 12:29 - 2013-09-21 10:53 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-03-22 12:29 - 2013-09-21 09:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2016-03-22 12:29 - 2013-08-31 14:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2016-03-22 12:29 - 2013-08-31 12:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2016-03-22 12:29 - 2013-08-27 06:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2016-03-22 12:29 - 2013-08-27 05:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2016-03-22 12:28 - 2014-10-30 22:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-03-22 12:28 - 2014-10-30 22:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-03-22 12:27 - 2013-11-27 15:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-03-22 12:27 - 2013-11-27 15:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-03-22 12:27 - 2013-11-27 14:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-03-22 12:27 - 2013-11-27 13:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-03-22 12:27 - 2013-11-15 14:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-22 12:27 - 2013-11-15 14:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-22 12:26 - 2014-01-04 15:54 - 00138240 _____ C:\Windows\system32\OEMLicense.dll
2016-03-22 12:26 - 2014-01-04 15:08 - 00103936 _____ C:\Windows\SysWOW64\OEMLicense.dll
2016-03-22 12:26 - 2014-01-02 23:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-03-22 12:26 - 2014-01-02 23:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-03-22 12:26 - 2013-12-31 23:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-03-22 12:26 - 2013-12-30 23:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2016-03-22 12:26 - 2013-12-30 23:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2016-03-22 12:26 - 2013-12-27 08:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2016-03-22 12:26 - 2013-12-27 07:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2016-03-22 12:26 - 2013-12-21 07:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2016-03-22 12:26 - 2013-12-17 07:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-03-22 12:24 - 2013-09-17 09:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-03-22 12:24 - 2013-09-17 06:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-03-22 12:21 - 2014-01-07 07:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2016-03-22 12:21 - 2014-01-07 05:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2016-03-22 12:21 - 2014-01-07 05:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-03-22 12:21 - 2014-01-07 04:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-03-22 12:21 - 2013-12-09 00:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-22 12:21 - 2013-12-09 00:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-03-22 12:21 - 2013-12-08 23:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-03-22 12:21 - 2013-12-08 23:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-22 12:21 - 2013-11-21 06:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-03-22 12:21 - 2013-11-21 05:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-03-22 01:33 - 2016-03-22 01:33 - 00552880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswnetsec.sys
2016-03-22 01:33 - 2016-03-22 01:33 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-03-22 01:33 - 2016-03-22 01:33 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-03-22 00:48 - 2016-03-22 00:56 - 282531840 _____ C:\Users\Windows 8.1\Downloads\kav_rescue_10.iso
2016-03-22 00:47 - 2016-03-22 00:47 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-03-22 00:46 - 2016-03-22 00:46 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\DAEMON Tools Lite
2016-03-22 00:46 - 2016-03-22 00:46 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-03-22 00:14 - 2016-03-22 00:14 - 00295520 _____ (Kaspersky Lab ZAO) C:\Users\Windows 8.1\Downloads\salitykiller.exe
2016-03-21 22:50 - 2016-03-21 22:51 - 00246926 _____ C:\TDSSKiller.3.1.0.9_21.03.2016_22.50.29_log.txt
2016-03-21 22:42 - 2016-03-21 22:43 - 00246926 _____ C:\TDSSKiller.3.1.0.9_21.03.2016_22.42.36_log.txt
2016-03-21 22:42 - 2016-03-21 22:42 - 00000490 _____ C:\TDSSKiller.3.1.0.9_21.03.2016_22.42.16_log.txt
2016-03-21 21:16 - 2016-03-21 21:16 - 00021365 _____ C:\Users\Windows 8.1\Downloads\ip-locator.htm
2016-03-21 21:16 - 2016-03-21 21:16 - 00000467 _____ C:\Users\Windows 8.1\Downloads\url.htm
2016-03-20 20:33 - 2016-03-20 20:33 - 00001765 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-03-20 20:33 - 2016-03-20 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-03-20 20:32 - 2016-03-20 20:33 - 00000000 ____D C:\Program Files\iTunes
2016-03-20 20:32 - 2016-03-20 20:32 - 00000000 ____D C:\Program Files\iPod
2016-03-20 20:32 - 2016-03-20 20:32 - 00000000 ____D C:\Program Files (x86)\iTunes
2016-03-20 20:24 - 2016-03-20 20:29 - 167583000 _____ (Apple Inc.) C:\Users\Windows 8.1\Downloads\iTunes6464Setup.exe
2016-03-20 20:23 - 2016-03-20 20:23 - 00000000 ____D C:\Windows\system32\appmgmt
2016-03-20 18:47 - 2016-03-20 18:47 - 00000314 _____ C:\Users\Windows 8.1\Desktop\Safe Mode Instruct.txt
2016-03-20 18:10 - 2016-03-20 18:10 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-03-20 18:10 - 2016-03-20 18:10 - 00000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-03-20 18:10 - 2016-03-20 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-03-20 18:10 - 2016-03-20 18:10 - 00000000 ____D C:\Program Files\CCleaner
2016-03-20 16:52 - 2016-03-20 16:56 - 139602704 _____ (Microsoft Corporation) C:\Users\Windows 8.1\Downloads\msert.exe
2016-03-20 14:04 - 2016-03-20 14:05 - 00249140 _____ C:\TDSSKiller.3.1.0.9_20.03.2016_14.04.32_log.txt
2016-03-20 12:01 - 2016-03-21 23:46 - 00049584 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2016-03-20 12:00 - 2016-03-20 12:15 - 00000000 ____D C:\ProgramData\HitmanPro
2016-03-20 11:59 - 2016-03-20 12:00 - 11441744 _____ (SurfRight B.V.) C:\Users\Windows 8.1\Downloads\hitmanpro_x64.exe
2016-03-20 11:49 - 2016-03-20 11:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-20 11:45 - 2016-03-20 11:47 - 22851472 _____ (Malwarebytes ) C:\Users\Windows 8.1\Downloads\mbam-setup-2.2.1.1043.exe
2016-03-20 11:41 - 2016-03-20 11:41 - 00002200 _____ C:\Users\Windows 8.1\Downloads\Rkill.txt
2016-03-20 11:39 - 2016-03-20 11:41 - 00245704 _____ C:\TDSSKiller.3.1.0.9_20.03.2016_11.39.50_log.txt
2016-03-20 11:37 - 2016-03-21 22:51 - 00002552 _____ C:\Users\Windows 8.1\Desktop\Rkill.txt
2016-03-20 11:34 - 2016-03-20 11:36 - 00245990 _____ C:\TDSSKiller.3.1.0.9_20.03.2016_11.34.49_log.txt
2016-03-19 22:39 - 2016-03-20 11:44 - 00001753 _____ C:\Users\Windows 8.1\Desktop\config.txt
2016-03-19 13:05 - 2016-03-19 13:05 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2016-03-19 10:11 - 2016-03-23 05:10 - 00000000 ____D C:\Windows\SysWOW64\vbox
2016-03-19 10:11 - 2016-03-23 05:10 - 00000000 ____D C:\Windows\system32\vbox
2016-03-19 10:11 - 2016-03-22 01:35 - 00003048 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458382306
2016-03-19 10:11 - 2016-03-22 01:35 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-03-19 10:11 - 2016-03-22 01:33 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00154024 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-03-19 10:11 - 2016-03-22 01:33 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-03-19 10:11 - 2016-03-20 14:21 - 00002091 _____ C:\Users\Public\Desktop\Avast Premier.lnk
2016-03-19 10:11 - 2016-03-19 10:11 - 00001053 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\AVAST Software
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-19 10:11 - 2016-03-19 10:11 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-19 10:10 - 2016-03-19 10:11 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-19 10:10 - 2016-03-19 10:10 - 00466400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2016-03-19 10:09 - 2016-03-19 10:11 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-19 10:05 - 2016-03-19 10:05 - 00000000 ____D C:\Users\Windows 8.1\Downloads\Avast! Premier Antivirus [2016] 11.1.2245 Final
2016-03-18 23:45 - 2016-03-20 18:11 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Media Player Classic
2016-03-16 09:55 - 2016-03-21 15:33 - 00000000 ____D C:\Users\Windows 8.1\Desktop\gems
2016-03-16 09:55 - 2016-03-18 18:02 - 00021521 ____H C:\Users\Windows 8.1\Desktop\~WRL1165.tmp
2016-03-15 15:26 - 2015-07-27 18:50 - 00000383 _____ C:\Users\Windows 8.1\Downloads\README
2016-03-15 15:26 - 2012-03-01 22:18 - 00721408 _____ (hxxp://lame.sf.net) C:\Users\Windows 8.1\Downloads\lame_enc.dll
2016-03-15 15:25 - 2016-03-15 15:25 - 00319995 _____ C:\Users\Windows 8.1\Downloads\lame_v3.99.5.zip
2016-03-14 22:17 - 2016-03-17 10:28 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Audacity
2016-03-14 22:17 - 2016-03-14 22:17 - 00001031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-03-14 22:17 - 2016-03-14 22:17 - 00001019 _____ C:\Users\Public\Desktop\Audacity.lnk
2016-03-14 22:17 - 2016-03-14 22:17 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Audacity
2016-03-14 22:17 - 2016-03-14 22:17 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-03-14 22:12 - 2016-03-14 22:16 - 26496761 _____ (Audacity Team ) C:\Users\Windows 8.1\Downloads\audacity-win-2.1.2.exe
2016-03-13 22:37 - 2016-03-13 22:37 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Macromedia
2016-03-13 22:27 - 2016-03-13 22:27 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Avira
2016-03-13 09:32 - 2016-03-13 09:32 - 00000000 ____D C:\Users\Windows 8.1\Documents\Avatar
2016-03-08 23:02 - 2016-03-08 15:01 - 00296742 ____N C:\Users\Windows 8.1\Downloads\Recommendation Letter - David Turner.pdf
2016-03-08 23:01 - 2016-03-08 23:01 - 00296920 _____ C:\Users\Windows 8.1\Downloads\Reference Letter.zip
2016-02-27 11:39 - 2016-03-01 11:24 - 00001115 _____ C:\Users\Windows 8.1\Desktop\esa claim details.txt
2016-02-24 18:19 - 2016-03-13 18:52 - 00000000 ____D C:\Users\Windows 8.1\Desktop\Tor Browser
2016-02-24 18:19 - 2016-02-24 18:19 - 00000773 _____ C:\Users\Windows 8.1\Desktop\Start Tor Browser.lnk
2016-02-24 18:17 - 2016-02-24 18:19 - 44088720 _____ C:\Users\Windows 8.1\Downloads\torbrowser-install-5.5.2_en-US (1).exe
2016-02-23 20:26 - 2016-02-24 18:19 - 00000821 _____ C:\Users\Windows 8.1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2016-02-23 20:23 - 2016-02-23 20:24 - 44088720 _____ C:\Users\Windows 8.1\Downloads\torbrowser-install-5.5.2_en-US.exe
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-03-23 10:49 - 2014-03-24 15:21 - 00003950 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3834A3D6-D3B3-42CA-9916-E1EEE3DADAAD}
2016-03-23 10:36 - 2014-03-24 15:31 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-23 10:30 - 2014-03-24 13:21 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-885293880-3586919169-2005417124-1001
2016-03-23 10:30 - 2013-08-22 15:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-23 10:20 - 2016-02-06 13:43 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-23 10:20 - 2016-02-06 13:43 - 00000000 __SHD C:\Users\Windows 8.1\IntelGraphicsProfiles
2016-03-23 05:08 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\Inf
2016-03-23 04:58 - 2014-03-24 13:12 - 00865408 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-23 04:54 - 2013-08-22 14:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-23 03:56 - 2016-02-06 15:25 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\ClassicShell
2016-03-23 01:57 - 2016-02-09 04:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soulseek NS
2016-03-23 01:16 - 2016-02-12 15:47 - 00001456 _____ C:\Users\Windows 8.1\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-03-22 23:03 - 2014-01-15 14:13 - 00000000 ____D C:\Windows\KMS
2016-03-22 16:29 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-22 16:28 - 2016-02-07 02:35 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\vlc
2016-03-22 16:20 - 2013-08-22 13:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-22 16:19 - 2014-03-24 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ToastData
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\WinStore
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\setup
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\migwiz
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\lv-LV
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\lt-LT
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\et-EE
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\MediaViewer
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\FileManager
2016-03-22 16:19 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Camera
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\Sysprep
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\oobe
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\Dism
2016-03-22 16:19 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\servicing
2016-03-22 15:51 - 2013-08-22 15:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-22 15:24 - 2013-08-22 13:25 - 00000219 _____ C:\Windows\system.ini
2016-03-22 15:15 - 2016-02-10 00:56 - 00000000 ___HD C:\Windows\AxInstSV
2016-03-22 13:10 - 2016-02-06 15:45 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-22 13:10 - 2014-03-24 15:21 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Google
2016-03-22 13:09 - 2016-02-06 15:45 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Deployment
2016-03-22 13:07 - 2016-02-07 02:35 - 00001082 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-03-22 12:35 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2016-03-21 23:49 - 2014-03-24 15:32 - 00000000 ____D C:\Program Files (x86)\FreeTime
2016-03-21 22:01 - 2016-02-07 02:51 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Azureus
2016-03-21 21:04 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\NDF
2016-03-20 20:32 - 2016-02-09 01:56 - 00000000 ____D C:\ProgramData\Apple
2016-03-20 20:32 - 2016-02-09 01:56 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-03-20 18:25 - 2014-03-24 13:10 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Packages
2016-03-20 18:23 - 2016-02-06 13:44 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2016-03-20 18:23 - 2014-03-24 15:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-20 18:22 - 2016-02-06 13:46 - 00000000 ____D C:\Users\Windows 8.1\Documents\CyberLink
2016-03-20 18:22 - 2014-03-24 15:26 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\CyberLink
2016-03-20 18:22 - 2014-03-24 15:26 - 00000000 ____D C:\ProgramData\CyberLink
2016-03-20 18:22 - 2014-03-24 15:23 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-03-20 18:17 - 2014-03-24 14:34 - 00000000 ____D C:\ProgramData\Nero
2016-03-20 18:17 - 2014-03-24 14:34 - 00000000 ____D C:\Program Files (x86)\Nero
2016-03-20 18:11 - 2014-03-24 14:01 - 00000000 ____D C:\Windows\Panther
2016-03-19 13:05 - 2014-03-24 13:10 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\Adobe
2016-03-19 10:05 - 2016-02-07 02:51 - 00000000 ____D C:\Users\Windows 8.1\Documents\Vuze Downloads
2016-03-18 23:59 - 2016-02-06 13:47 - 00000000 ____D C:\ProgramData\Avira
2016-03-18 23:59 - 2016-02-06 13:47 - 00000000 ____D C:\Program Files (x86)\Avira
2016-03-18 23:59 - 2014-03-24 22:56 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-18 14:19 - 2014-03-24 15:31 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-18 14:19 - 2014-03-24 13:30 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\Adobe
2016-03-17 22:52 - 2016-02-09 04:30 - 00000000 ____D C:\ProgramData\Soulseek
2016-03-17 10:47 - 2016-02-09 04:33 - 00000000 ____D C:\Users\Windows 8.1\Documents\soulseek
2016-03-17 02:57 - 2016-02-08 01:33 - 00000000 ____D C:\Users\Windows 8.1\AppData\Local\ElevatedDiagnostics
2016-03-15 17:41 - 2014-03-24 15:31 - 00000000 ____D C:\The KMPlayer
2016-03-13 09:32 - 2014-03-24 23:11 - 00000000 ____D C:\Users\Windows 8.1\Documents\Youcam
2016-03-13 09:32 - 2014-03-24 23:07 - 00000000 ____D C:\Users\Windows 8.1\AppData\Roaming\CyberLink
2016-03-08 07:00 - 2013-08-22 15:38 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-08 07:00 - 2013-08-22 15:38 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 
==================== Files in the root of some directories =======
 
2016-02-12 15:47 - 2016-03-23 01:16 - 0001456 _____ () C:\Users\Windows 8.1\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-02-07 16:33 - 2016-02-07 16:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2016-03-21 11:23
 
==================== End of FRST.txt ============================

Attached Files



#5 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 28 March 2016 - 02:51 PM

Hello. I've waited about a week for a reply from someone here. I believe the person who said they'd help "was concerned." So I'm hanging here. Today, I came back to find someone in my computer again, the mouse flying everywhere , programs opening and I couldn't control anything apart from shutting down the computer. Even when I shut down and rebooted I was greeted by the mouse going off on it's own again. Something is very wrong here. Please help. Thank you.



#6 xXToffeeXx

xXToffeeXx

    Bleepin' Polar Bear


  • Malware Response Instructor
  • 6,027 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Arctic Circle
  • Local time:11:25 AM

Posted 28 March 2016 - 02:53 PM

Hi David-68T,
 
Sorry about the delay. I missed the email notification.

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters
     
     
    tds2.jpg
  • Check Loaded Modules, Verify Driver Digital Signature, and Detect TDLFS file system
  • If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now
     
     
    2012081514h0118.png
  • Click Start Scan and allow the scan process to run
     
     
    tds4-1.jpg
  • If threats are detected select Skip or Cure (if available) for all of them unless otherwise instructed.
    ***Do NOT select Delete!
  • Click Continue
     
     
    tds6.jpg
  • Click Reboot computer
  • Please copy the TDSSKiller.[Version]_[Date]_[Time]_log.txt file found in your root directory (typically c:\) and paste it into your next reply

xXToffeeXx~


~If I am helping you and you have not had a reply from me in two days, please send me a PM~

 

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic] - If we have helped you out and you want to support what we do, you can do so here

 

 ~Twitter~ | ~Malware Analyst at Emsisoft~


#7 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 28 March 2016 - 04:32 PM

having problems copying pasting so its attached

Attached Files



#8 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 29 March 2016 - 03:03 AM

FYI:
Programs I have run in safe, boot and normal mode in an effort to clean this little B*ST*RD:
TDSSKiller
MalwareBytes
AVAST premium
Rogue Killer
ADWCleaner
ESET
SecurityCheck
HitManPro
CCleaner
Defender
Farbar
Microsoft Emergency Support

I think the original virus may have come onto my computer through an Android Ap on my phone which was tethered. Since then I have reset my phone to factory, installed Avast and had its data turned off. I'm using Win 8.1 and have blocked all wireless connections in case it was someone on my local network. I'm at a loss now. Look at my face "Meeeeeaaaaaaa...."


Edited by David-68T, 29 March 2016 - 03:14 AM.


#9 xXToffeeXx

xXToffeeXx

    Bleepin' Polar Bear


  • Malware Response Instructor
  • 6,027 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Arctic Circle
  • Local time:11:25 AM

Posted 29 March 2016 - 01:51 PM

Hi David-68T,
 
Unlikely it came through your phone. Did any of the scans find anything?
 
Have you tried a different mouse?
 
xXToffeeXx~


~If I am helping you and you have not had a reply from me in two days, please send me a PM~

 

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic] - If we have helped you out and you want to support what we do, you can do so here

 

 ~Twitter~ | ~Malware Analyst at Emsisoft~


#10 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 30 March 2016 - 04:21 AM

Hi,

Can you specify your thoughts? Are you suggesting someone is hacking through my mouse...mousejacking?

The symptoms match, but they need to be in 100 meter radius and know from having visible confirmation that I'm using a wireless mouse, right? 

I haven't been outside using my laptop 'out' ever. I'm in a room where no one can see me working. (Not using the wireless mouse/keybard now) The first time it went mad my phone was attached (and tethered) using it's wireless connection, but I've moved house since then, so unless they are following me....I can't see how it is a mousejack.  

In any case, if you are right then they have alreday installed a root kit, right? Explaining the annoying continuance. If so shouldn't that show up in all the scans I've done? Nothing is showing up in the above software apart from the initial captures (attached in first post above) of Sality in MWB and Avast!
   



#11 xXToffeeXx

xXToffeeXx

    Bleepin' Polar Bear


  • Malware Response Instructor
  • 6,027 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Arctic Circle
  • Local time:11:25 AM

Posted 30 March 2016 - 02:26 PM

Hi David-68T,
 
It is not likely that mousejacking is going on or that you are being hacked. Your logs look clean and none of the scan found anything, so this is unlikely a malware issue.
 
I was wondering if the mouse was faulty, if so when you try a different one then the problem will not occur.
 
Can you also make sure your date and time on the clock on the bottom right corner is set properly.
 
xXToffeeXx~


~If I am helping you and you have not had a reply from me in two days, please send me a PM~

 

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic] - If we have helped you out and you want to support what we do, you can do so here

 

 ~Twitter~ | ~Malware Analyst at Emsisoft~


#12 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 31 March 2016 - 06:38 AM

Hi. Thanks for your help, I know you have many people with many problems, but a faulty mouse doesn't explain programs opening and being selectively clicked and run. Besides the scans showed a Sality virus and stubbs. The hijacked screen and mouse has occurred more than three times. Don't get me wrong, I thank you for your help, but I would greatly appreciate it if you could you could pass me onto somebody else here for a second opinion, please? Thank you.   
 



#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,815 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:01:25 PM

Posted 31 March 2016 - 06:47 AM

Hello David,

I understand your concerns about the issues you're experiencing, but you can be sure, as your helper assured you, that no malware is present. We actually double checked your logs to ensure nothing was overlooked.

 

I strongly suggest to try another mouse in this case, it can't hurt just to try it (maybe you can borrow one or use one from another computer), so that you can verify if the problem still exists afterwards.


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 David-68T

David-68T
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 31 March 2016 - 07:01 AM

Hello. OK, well I'll leave it at that. Thank you for your help, once again.



#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,815 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:01:25 PM

Posted 31 March 2016 - 07:02 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users